Cybersecurity
Harvard breach exposed data from 851,000 accounts
Hackers accessed Harvard's alumni and fundraising systems in November 2025, and Have I Been Pwned later said leaked material exposed data linked to 851,000 accounts, including contact and profile details.
- Hackers breached Harvard University's Alumni Affairs and Development systems in November 2025.
- Have I Been Pwned said the leaked material was linked to 851,000 unique email addresses.
- Harvard said the exposed records covered students, alumni, donors, staff and faculty and included contact details, donation information and biographical data.
- Klara Jelinkova said the affected systems did not hold Social Security numbers, passwords, payment card data or financial information.
- ShinyHunters claimed responsibility, said it took more than 1 million records, and later posted a 1.1GB archive after Harvard refused a ransom.
Hackers breached Harvard University's Alumni Affairs and Development systems in November 2025. Have I Been Pwned later said the leaked material was tied to 851,000 unique email addresses.
Harvard said the exposed records covered students, alumni, donors, staff and faculty. The data included contact details, home and business addresses, event attendance records, donation information and biographical material used for fundraising and alumni engagement.
Klara Jelinkova, Harvard's vice president and chief information officer, said the compromised systems did not contain Social Security numbers, passwords, payment card data or financial information. Harvard has not named the attackers.
ShinyHunters said it was responsible for the intrusion and claimed to have taken more than 1 million records. The group later published a 1.1GB archive online after Harvard did not pay a ransom.
The article also said Harvard was investigating a separate breach after Clop claimed to have used an Oracle E-Business Suite zero-day flaw. Harvard had disclosed that investigation in October 2025.
Named in this story
People
- Klara Jelinkova
- Harvard's vice president and chief information officer, who commented on the exposed data
Organisations
- Harvard University
- the university whose systems were breached and whose disclosures were reported
- ShinyHunters
- the extortion gang that claimed responsibility and said it stole the records
- Clop ransomware gang
- the gang that claimed a separate breach involving Harvard
Products and systems
- Harvard University's Alumni Affairs and Development systems
- the systems attackers accessed in the November 2025 breach
- Have I Been Pwned
- the breach notification service that analysed the leaked data
- Oracle E-Business Suite
- the software whose zero-day flaw was linked to the separate claimed breach
How the source tells it
The piece was straight news copy, with no distinct emotive theme beyond routine attribution of the breach and later leak.
No emotive framing was found in the original.