Skip to content
Breaches.

Harvard University

Disclosed Oct 13, 202511 months agoUnverified

Harvard alumni and donor data stolen in Oracle EBS and phishing attacks

Harvard said data from a small administrative unit was taken via the Oracle E-Business Suite zero-day after Clop listed it, and in November disclosed a separate breach of alumni and donor systems exposing contact details, event attendance and donation data, but no SSNs or payment data.

What is known

People affectedNot stated in the sources we have
DisclosedOct 13, 2025
AttackHacking
Data exposedNames, Emails, Phone numbers, Addresses, Financial, Other
SectorEducation · US
StatusUnverified: not yet confirmed by an official notice, a filing or the organization
Part ofOracle ebs (2025)

Sources

Source
Harvard investigating breach linked to Oracle zero-day exploitbleepingcomputer.com · News
Harvard University discloses data breach affecting alumni, donorsbleepingcomputer.com · News

Notices filed

WhereFiledPeople
ResearchtotalOct 13, 2025

Same campaign

OrganizationAffected
The Estée Lauder CompaniesEstee Lauder notifies employees of HR data theft via Oracle EBS flawJul 202 months agoHackingUnverifiedUnknown
Barts Health NHS TrustClop steals Barts Health invoices via Oracle EBS zero-dayDec 5, 20259 months agoSupply chainUnverifiedUnknown
University of PhoenixClop Oracle EBS hack exposes 3.5M University of Phoenix recordsDec 2, 20259 months agoSupply chain3.5M
Dartmouth CollegeClop Oracle EBS attack exposes SSNs of 1,494 Dartmouth individualsNov 24, 202510 months agoSupply chain99K
Cox EnterprisesOracle EBS zero-day breach exposes 9,479 Cox Enterprises peopleNov 20, 202510 months agoSupply chain9,479
LogitechLogitech confirms data theft in Clop Oracle zero-day campaignNov 14, 202510 months agoSupply chainUnknown
Washington PostOracle EBS hack exposes Washington Post staff bank and SSN dataNov 7, 202510 months agoSupply chain9,720
GlobalLogicOracle EBS zero-day breach exposes 10,471 GlobalLogic employeesNov 7, 202510 months agoSupply chain10K
Envoy AirClop steals business data from American Airlines' Envoy via Oracle EBSOct 17, 202511 months agoSupply chainUnverifiedUnknown
OracleClop exploits Oracle E-Business Suite zero-day to steal data from dozensOct 2, 202511 months agoSupply chainUnknown
History of this record
  • 2026-09-25 · added · seed source

First seen 2026-09-25 (Research). Record counts are as reported. Not legal advice.

Everything about Harvard University

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.