Every public data breach

44 disclosed this week · 26,355 on record

Harvard University

Disclosed Oct 13, 2025850,537 accountsConfirmed

Official notice

Harvard alumni and donor data stolen in Oracle EBS and phishing attacks

Harvard said data from a small administrative unit was taken via the Oracle E-Business Suite zero-day after Clop listed it, and in November disclosed a separate breach of alumni and donor systems exposing contact details, event attendance and donation data, but no SSNs or payment data.

What is known

People affected850,537 (accounts in the leaked data, per Have I Been Pwned)
DisclosedOct 13, 2025
HappenedNov 18, 2025
AttackHacking
Data exposedNamesEmailsPhone numbersAddressesFinancialOtherDates of birthEducation recordsEmployment
SectorEducation · US
StatusConfirmed
Part ofOracle ebs (2025)
Check your emailHave I Been Pwned

Sources

Notices filed

Same campaign

Other breaches at Harvard University

History of this record
status2026-11-04
disclosed to confirmedby dailySource
verified_by2026-11-04
empty to companyby dailySource
verified2026-11-04
0 to 1by dailySource
hibp2026-11-04
empty to Harvardby dailySource
data_types2026-11-04
["names","emails","phone","addresses","financial","other"] to ["names","emails","phone","addresses","financial","other","dob","education","employment"]by dailySource
records_basis2026-11-04
empty to hibpby dailySource
records2026-11-04
empty to 850537by dailySource
occurred2026-11-04
empty to 2025-11-18by dailySource
Added2026-09-25
First recordedby seedSource

First seen 2026-09-25 (Research), confirmed by Company page. Record counts are as reported. Not legal advice.

Everything about Harvard University