In November 2025, Harvard University suffered a data breach later linked to a ShinyHunters “pay or leak” extortion attempt. The data contained 851k unique email addresses relating to the university’s alumni and fundraising systems, along with extensive profile information for donors, alumni, parents and some faculty, staff and students. In Harvard’s disclosure notice, the university stated that the breach impacted “personal information such as email addresses, telephone numbers, home and business addresses, event attendance, details of donations to the University, and other biographical information pertaining to University fundraising and alumni engagement activities”.
- Breach date: 2025-11-18
- Added to HIBP: 2026-11-03 07:24 UTC
- Compromised accounts: 850,537
- Compromised data: Charitable donations, Citizenship statuses, Dates of birth, Education levels, Email addresses, Employers, Ethnicities, Family members’ names, Genders, Job titles, Marital statuses, Names, Occupations, Phone numbers, Physical addresses, Places of birth, Salutations, Social media profiles
- Domain: harvard.edu
- Verified: Yes
Source: Have I Been Pwned — Breaches · 2026-11-03