Harvard University
Disclosed Oct 13, 2025850,537 accountsConfirmed
Harvard alumni and donor data stolen in Oracle EBS and phishing attacks
Harvard said data from a small administrative unit was taken via the Oracle E-Business Suite zero-day after Clop listed it, and in November disclosed a separate breach of alumni and donor systems exposing contact details, event attendance and donation data, but no SSNs or payment data.
What is known
| People affected | 850,537 (accounts in the leaked data, per Have I Been Pwned) |
|---|---|
| Disclosed | Oct 13, 2025 |
| Happened | Nov 18, 2025 |
| Attack | Hacking |
| Data exposed | NamesEmailsPhone numbersAddressesFinancialOtherDates of birthEducation recordsEmployment |
| Sector | Education · US |
| Status | Confirmed |
| Part of | Oracle ebs (2025) |
| Check your email | Have I Been Pwned |
Sources
Notices filed
Same campaign
Other breaches at Harvard University
History of this record
disclosed to confirmedby dailySource
empty to companyby dailySource
0 to 1by dailySource
empty to Harvardby dailySource
["names","emails","phone","addresses","financial","other"] to ["names","emails","phone","addresses","financial","other","dob","education","employment"]by dailySource
empty to hibpby dailySource
empty to 850537by dailySource
empty to 2025-11-18by dailySource
First recordedby seedSource
First seen 2026-09-25 (Research), confirmed by Company page. Record counts are as reported. Not legal advice.