Dartmouth College
Disclosed Nov 24, 202510 months ago98,990 affectedConfirmed
Clop Oracle EBS attack exposes SSNs of 1,494 Dartmouth individuals
Dartmouth told Maine's attorney general that attackers exploited the Oracle E-Business Suite zero-day to steal files containing names, SSNs and financial account information of 1,494 people.
What is known
| People affected | 98,990 (as reported by the organization) |
|---|---|
| Disclosed | Nov 24, 2025 |
| Discovered | Aug 12, 2025 |
| Happened | Aug 9, 2025 |
| Attack | Supply chain |
| Data exposed | Names, Social Security numbers, Financial, Payment cards |
| Sector | Education · US |
| Status | Confirmed |
| Part of | Oracle ebs (2025) |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Dartmouth Collegeoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: Dartmouth Collegeatg.wa.gov · Official notice | Official notice |
| Oregon DOJ breach notice: Dartmouth Collegejustice.oregon.gov · Official notice | Official notice |
| Dartmouth College confirms data breach after Clop extortion attackbleepingcomputer.com · News | News |
| Texas Attorney General data security breach report BR-0004692: Dartmouth Collegeoag.my.site.com · Official notice | Official notice |
| Vermont Attorney General: 2025-11-24 Dartmouth College Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| Indiana Attorney General 2025 data breach report: Dartmouth Collegein.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Nov 24, 2025 | |
| Washington AGresidents of WA | Nov 24, 2025 | 1,496 |
| Oregon DOJresidents of OR | Nov 24, 2025 | 98,990 |
| Vermont AGresidents of VT | Nov 24, 2025 | |
| Indiana AGresidents of IN | Nov 24, 2025 | 413 |
| Researchtotal | Nov 25, 2025 | 1,494 |
| Texas AGresidents of TX | Nov 25, 2025 | 1,956 |
Same campaign
History of this record
- 2026-09-25 · source: empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Report-2025.pdf · backfill source
- 2026-09-25 · source: empty to https://ago.vermont.gov/document/2025-11-24-dartmouth-college-data-breach-notice-consumers · backfill source
- 2026-09-25 · data_types: ["names","ssn","financial"] to ["names","ssn","financial","payment-card"] · backfill source
- 2026-09-25 · records: 1494 to 98990 · backfill source
- 2026-09-25 · campaign: empty to oracle-ebs-2025 · seed source
- 2026-09-25 · attack: hacking to supply-chain · seed source
- 2026-09-25 · data_types: [] to ["names","ssn","financial"] · seed source
- 2026-09-25 · records_basis: empty to organization · seed source
- 2026-09-25 · records: empty to 1494 · seed source
- 2026-09-25 · summary: empty to Dartmouth told Maine's attorney general that attackers exploited the Oracle E-Business Suite zero-day to steal files containing names, SSNs and financial account information of 1,494 people. · seed source
- 2026-09-25 · title: empty to Clop Oracle EBS attack exposes SSNs of 1,494 Dartmouth individuals · seed source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · discovered: empty to 2025-08-12 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.