Columbia University Information (Dental) Listed by Global Secret Group Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Ransomware crews continue to pressure large institutions by posting alleged victims on leak sites, often before any independent confirmation. In that climate, a listing is a public claim and a negotiation tactic, not a verified inventory of what happened inside a network.

On August 14, 2026, the group known as Global Secret Group listed Columbia University Information (Dental) on its leak site, associating the name with Columbia University’s broader presence in New York and the colleges-and-universities sector. Public detail is limited. The university has not publicly confirmed the incident as of writing. The listing matters because higher-education and dental-care environments often hold sensitive personal and clinical information; if any of that material were ever taken, the consequences for students, patients, and staff could be serious. What follows separates the group’s claims from what remains unconfirmed.

What the listing says

According to the listing, Global Secret Group has named Columbia University Information (Dental) as a victim and has described associated “properties” as 296 GB, said to comprise 283,387 files and 11,268 folders. The same listing material ties the organization to New York in the United States, the website columbia.edu, the colleges-and-universities industry, a stated revenue figure of $6.6 billion, and an employee range of roughly 20,000 to 25,000. Those figures appear as part of the group’s presentation; they are not independently verified here.

The number of people affected is unknown. Data types allegedly involved are not disclosed in the material provided. Timing of any intrusion, initial access method, duration of access, and whether any files were actually copied or published beyond the listing itself are undisclosed. The listing should be read as an extortion-related claim: Global Secret Group asserts it holds data and advertises volume; that is not the same as a regulator finding, a university notice, or a claimed breach report.

Who is Global Secret Group?

Global Secret Group is known publicly as a ransomware and data-extortion actor that follows a pattern common to many modern crews: encrypt or threaten systems, exfiltrate or claim to exfiltrate data, and use a leak site to name organizations and pressure payment. Groups in this category typically post victim names, sometimes sample file counts or claimed archive sizes, and deadlines, then escalate by threatening full publication. Public reporting on such actors generally emphasizes double-extortion—disruption plus the threat of exposure—rather than quiet, purely financial crime.

For this specific listing, only what appears in the group’s claim should be attributed to them. Global Secret Group claims to have data tied to Columbia University Information (Dental) and advertises a large file set by volume and count. No confirmed statement from the university, and no independent forensic summary, is part of the facts available for this article. Leak-site posts can be exaggerated, recycled, incomplete, or false; they establish that a crew chose to name an organization, not that every advertised detail is accurate.

Columbia University Information (Dental) and its sector

Columbia University is a major research university in New York. “Columbia University Information (Dental)” in the listing points to dental-related information holdings within that institutional umbrella—academic dental education, clinics, and administrative systems that support care and training. Colleges and universities, and dental schools and clinics in particular, sit at the intersection of education records, employment data, and healthcare-adjacent information.

A leak-site claim against such an entity is consequential because the sector routinely processes identities of students, faculty, staff, and patients; scheduling and billing; and, in clinical settings, health-related details governed by strict confidentiality expectations. Even an unproven listing can create anxiety for people who have interacted with university dental services, and it can force institutions to investigate, communicate carefully, and assess legal and regulatory obligations. The listing does not, by itself, prove that any of those systems were compromised.

What was likely exposed

The facts do not name exposed data types; they are not disclosed. It would be improper to state that specific categories were stolen or leaked. Conditionally, if files from a university dental information environment were ever taken, organizations in this sector typically hold combinations of contact and identity data, student or employee records, appointment and billing information, and clinical or insurance-related documentation. Whether any such material is involved here is unconfirmed.

The group’s claimed volume—296 GB and hundreds of thousands of files across many folders—is part of the listing’s marketing language, not a verified contents list. Large claimed archives can include duplicates, system files, or material unrelated to individuals. Until the university or another authoritative source describes scope, readers should treat “what may have been exposed” as unknown.

The real-world impact

For individuals, the practical risk is conditional. If personal or clinical information associated with university dental services were ever obtained by criminals, possible harms include targeted phishing that references real appointments or providers, attempts at identity fraud using names and identifiers, and misuse of health-related details for scams or embarrassment. None of that is established solely by a leak-site name appearing online.

For the organization, an unconfirmed listing still creates operational and reputational pressure: the need to determine whether the claim has any basis, to protect accounts and systems, and to decide what, if anything, must be disclosed to affected people and authorities. A listing does not establish negligence, security failures, or internal priorities; it establishes only that Global Secret Group chose to publish an accusation and claimed file metrics. Separating claim from confirmation is essential both for accuracy and for fair treatment of a named institution.

If your data was involved

If you are a student, patient, employee, or affiliate who worries your information might be implicated, act on the possibility rather than on certainty. Prefer official notices from Columbia University or its dental schools and clinics over posts on criminal sites. Watch for unexpected messages that cite dental visits, bills, or student status, and verify through known channels before clicking links or sharing codes. Consider placing fraud alerts or credit freezes if you have reason to fear identity misuse, and review financial and insurance statements for unfamiliar activity. Use unique passwords and multi-factor authentication on email and patient-portal accounts. If clinical privacy is a concern, ask the university’s designated privacy or patient-relations contacts what, if anything, they have confirmed.

You can also run a free exposure scan of your email address to check whether your information has already surfaced in known breach datasets elsewhere—useful context, though it will not prove or disprove this specific unconfirmed listing. Remain cautious until primary sources, not extortion sites, describe what if anything occurred.

AICompiled with AI assistance from public sources and published under our editorial standards.