Skip to content

Back to the catalog

Harvard University data breach exposed info of 851,000 accounts
bleepingcomputer.comarticle

Harvard University data breach exposed info of 851,000 accounts

Harvard University's Alumni Affairs and Development systems were breached in November 2025, and Have I Been Pwned confirmed 850,500 accounts exposed. ShinyHunters claimed the attack and leaked a 1.1GB archive in February 2026 after Harvard refused to pay. Exposed data includes names, emails, birth dates, phone numbers, addresses and donation details, but no SSNs, passwords or payment data. The article also notes a separate Clop claim using an Oracle E-Business Suite zero-day.

TL;DR Have I Been Pwned confirms the ShinyHunters breach of Harvard's alumni and fundraising systems exposed 850,500 accounts.
Open original ↗

Organisations named here

  • Harvard University
  • Have I Been Pwned
  • Klara Jelinkova
  • Princeton University
  • University of Pennsylvania
  • University of Phoenix

Technologies named here

  • HIBP
  • Oracle E-Business Suite
  • Harvard University Alumni Affairs and Development systems (breached November 2025; discovered November 18, 2025)

Techniques named here

  • Data extortion
  • Exploitation of zero-day vulnerability

Concepts named here

  • Attribution uncertainty
  • Data breach scope
  • Related university breaches

Threat actors named here

  • ShinyHunters
  • Clop

Related in Threat Intel