Harvard University suffered a significant data breach in November 2025 that exposed the personal information of more than 850,000 individuals, as first reported by Bleeping Computer.
The breach targeted the university's Alumni Affairs and Development systems, compromising names, email addresses, phone numbers, home addresses and donation records. Klara Jelinkova, the university chief information officer, confirmed that sensitive data such as Social Security numbers and payment information remained secure. The ShinyHunters extortion gang claimed responsibility for the attack, leaking a 1.1GB archive of stolen documents after the institution refused to pay a ransom. While the university initially withheld specific figures, analysis from the service Have I Been Pwned confirmed that 850,500 unique accounts were affected. This incident is part of a broader trend of cyberattacks targeting higher education, with institutions like Princeton University and the University of Pennsylvania reporting similar breaches involving donor data. Additionally, Harvard faced a separate investigation in October 2025 regarding a potential exploit of an Oracle E-Business Suite vulnerability. These events highlight the ongoing security challenges facing academic institutions as they manage vast databases of alumni and donor information, making them prime targets for cybercriminals seeking to leverage stolen biographical data for extortion.
Source: Bleeping Computer
