Princeton University is facing a class action lawsuit for allegedly failing to protect sensitive personal information of its alumni, students, and donors. The complaint was filed by Henggao Cai in the United States District Court for the District of New Jersey on November 18, 2025. Cai accuses Princeton University of negligence and breach of contract following a data breach that exposed personally identifiable information (PII) to unauthorized third-party cybercriminals.
According to the complaint, on or before November 10, 2025, cybercriminals accessed the university’s “University Advancement” database. This database contained detailed personal information such as names, contact details, employment records, and even wealth indicators of over a hundred thousand individuals associated with Princeton University. The attackers intended to misuse this data for marketing and potentially selling it on dark web markets. Despite being aware of potential risks and previous breaches at other institutions like Columbia University and the University of Pennsylvania earlier in 2025, Princeton allegedly failed to implement adequate security measures.
Cai argues that Princeton had numerous obligations to protect the PII it collected from alumni and others involved with the university. These duties included securing their systems against unauthorized access and promptly notifying affected individuals once a breach occurred. The lawsuit claims that Princeton’s failure to encrypt sensitive data or monitor its network adequately led directly to this breach. Cai asserts that this negligence has resulted in increased risks of identity theft and fraud for those whose data was compromised.
The plaintiff seeks various forms of relief from the court including damages exceeding $5 million, an injunction requiring Princeton to improve its data security practices, and other equitable remedies. Additionally, Cai demands compensation for out-of-pocket expenses incurred due to the breach and requests ongoing monitoring services for affected individuals.
Representing Henggao Cai are attorneys Kevin Laukaitis from Laukaitis Law LLC based in San Juan, Puerto Rico; Joseph D. DePalma; and Catherine B. Derenze from Lite DePalma Greenberg & Afanador LLC located in Newark, New Jersey. The case is presided over by Judge [Name not provided] under Case ID: 3:25-cv-17684.
Source: 325cv17684_Cai_v_Princeton_University_Complaint_District_New_Jersey.pdf
