JEDI-SEC | Security Research & Digital Defense

Tag: Genders

  • Harvard data breach — 850,537 accounts

    Harvard data breach — 850,537 accounts

    In November 2025, Harvard University suffered a data breach later linked to a ShinyHunters “pay or leak” extortion attempt. The data contained 851k unique email addresses relating to the university’s alumni and fundraising systems, along with extensive profile information for donors, alumni, parents and some faculty, staff and students. In Harvard’s disclosure notice, the university stated that the breach impacted “personal information such as email addresses, telephone numbers, home and business addresses, event attendance, details of donations to the University, and other biographical information pertaining to University fundraising and alumni engagement activities”.

    • Breach date: 2025-11-18
    • Added to HIBP: 2026-11-03 07:24 UTC
    • Compromised accounts: 850,537
    • Compromised data: Charitable donations, Citizenship statuses, Dates of birth, Education levels, Email addresses, Employers, Ethnicities, Family members’ names, Genders, Job titles, Marital statuses, Names, Occupations, Phone numbers, Physical addresses, Places of birth, Salutations, Social media profiles
    • Domain: harvard.edu
    • Verified: Yes

    Source: Have I Been Pwned — Breaches · 2026-11-03

  • Sharecare data breach — 318,185 accounts

    Sharecare data breach — 318,185 accounts

    In August 2026, the digital health company Sharecare was the target of a ShinyHunters “pay or leak” extortion campaign. The group subsequently published data it claimed was taken from Sharecare’s systems, containing 318k unique email addresses. Most of the data consisted of B2B sales and marketing records with names, physical addresses, phone numbers, job titles and employers. The data also included a small number of Brazilian health insurance plan members, including dates of birth, genders, marital statuses and CPF numbers (Brazilian taxpayer identification numbers).

    • Breach date: 2026-08-12
    • Added to HIBP: 2026-10-12 23:28 UTC
    • Compromised accounts: 318,185
    • Compromised data: Dates of birth, Email addresses, Employers, Genders, Government issued IDs, Job titles, Marital statuses, Names, Phone numbers, Physical addresses
    • Domain: sharecare.com
    • Verified: Yes

    Source: Have I Been Pwned — Breaches · 2026-10-12