More than 850,000 accounts tied to Harvard University have surfaced in breach-tracking databases and dark web archives following a late 2025 cyberattack. The prominent Ivy League institution confirmed that its Alumni Affairs and Development systems were compromised after attackers executed a successful voice phishing, or vishing, operation. While initial estimates left the precise scope unclear, analysis by Have I Been Pwned? revealed that exactly 850,500 unique accounts were impacted by the security lapse.
The compromised archive contains extensive profile information, including names, personal email addresses, phone numbers, home and business postal addresses, dates of birth, and social media profiles. Additionally, the leak exposed event attendance records, donation details, and biographical data connected to university fundraising and alumni engagement. According to university disclosures, the breach affected alumni, donors, select faculty, staff, and current students, alongside their spouses, partners, and parents. Fortunately, administrators confirmed that sensitive financial details such as Social Security numbers, passwords, and payment card information remained secure.
The notorious ShinyHunters extortion group quickly claimed responsibility for the security incident. After negotiations with the university fell through, the threat actors published a 1.1GB document archive containing over a million records on a dark web forum in early February. The incident forms part of a broader wave of targeted attacks against higher education institutions, following similar breaches at Princeton University and the University of Pennsylvania during the same period. While universities increasingly rely on multi-factor authentication, these sophisticated social engineering tactics continue to bypass traditional perimeter defenses and expose vast amounts of personal data.
Harvard Data Breach Exposes Over 850000 Accounts Online
Comments