Dartmouth College
Disclosed Nov 24, 202598,990 affectedConfirmed
Clop Oracle EBS attack exposes SSNs of 1,494 Dartmouth individuals
Dartmouth told Maine's attorney general that attackers exploited the Oracle E-Business Suite zero-day to steal files containing names, SSNs and financial account information of 1,494 people.
What is known
| People affected | 98,990 (as reported by the organization) |
|---|---|
| Disclosed | Nov 24, 2025 |
| Discovered | Aug 12, 2025 |
| Happened | Aug 9, 2025 |
| Attack | Supply chain |
| Data exposed | NamesSocial Security numbersFinancialPayment cards |
| Sector | Education · US |
| Status | Confirmed |
| Part of | Oracle ebs (2025) |
Sources
California Attorney General breach notice: Dartmouth CollegeWashington Attorney General breach notice: Dartmouth CollegeOregon DOJ breach notice: Dartmouth CollegeDartmouth College confirms data breach after Clop extortion attackTexas Attorney General data security breach report BR-0004692: Dartmouth CollegeVermont Attorney General: 2025-11-24 Dartmouth College Data Breach Notice to ConsumersIndiana Attorney General 2025 data breach report: Dartmouth College
Notices filed
Same campaign
History of this record
empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Report-2025.pdfby backfillSource
empty to https://ago.vermont.gov/document/2025-11-24-dartmouth-college-data-breach-notice-consumersby backfillSource
["names","ssn","financial"] to ["names","ssn","financial","payment-card"]by backfillSource
1494 to 98990by backfillSource
empty to oracle-ebs-2025by seedSource
hacking to supply-chainby seedSource
[] to ["names","ssn","financial"]by seedSource
empty to organizationby seedSource
empty to 1494by seedSource
empty to Dartmouth told Maine's attorney general that attackers exploited the Oracle E-Business Suite zero-day to steal files containing names, SSNs and financial account information of 1,494 people.by seedSource
empty to Clop Oracle EBS attack exposes SSNs of 1,494 Dartmouth individualsby seedSource
unknown to hackingby backfillSource
empty to 2025-08-12by backfillSource
First recordedby backfillSource
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.