Harvard University reveals data breach exposed 851,000 accounts
"Extensive profile information" was taken from Harvard accounts, the University reveals.
Harvard University disclosed that a data breach affecting 850,500 individuals has recently appeared in breach-tracking databases and dark web archives. The compromised information encompasses email addresses, contact details, demographic data, and extensive alumni and donor profiles. The attack was carried out via a voice phishing (vishing) scam in late November 2025, targeting the Alumni Affairs and Development systems.
These systems held information about alumni, donors, some faculty and staff, current students, as well as spouses, partners, and parents. However, social security numbers, passwords, payment card information, or financial data remained unexposed. ShinyHunters, the notorious extortionist group, claimed responsibility for the breach shortly after.
The group leaked over 1.1GB of documents containing personally identifiable information (PII) and donation data in early February 2025. Harvard now confirms that 851,000 unique email addresses were affected, along with extensive profile data for donors, alumni, parents, and some faculty, staff, and students.
Written by urgent.news from TechRadar's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
