A hacker breached New York University’s website on March 22, replacing its homepage with racialized test score charts and links to datasets containing personal information on over 1 million applicants. Though the hacker claimed the data was redacted, cybersecurity experts confirmed that names, addresses, GPAs, emails, and more were exposed.

The hacker, allegedly part of a group previously responsible for a University of Minnesota breach, claims the attack aimed to protest the Supreme Court’s 2023 affirmative action ruling. NYU responded within hours, restored the site, and is working with law enforcement and cybersecurity experts.

The breach reportedly includes applicant data dating back to 1989, and experts have called the leak irresponsible, regardless of motive, due to the lasting privacy risks for millions.