Harvard University alumni and fundraising data breach tied to ShinyHunters extortion exposes 851k email addresses
In November 2025, Harvard University suffered a data breach later linked to a ShinyHunters "pay or leak" extortion attempt. Have I Been Pwned added the dataset on 3 Nov 2026, covering about 851k unique email addresses (850.5k affected addresses) from the university's alumni and fundraising systems. The records include extensive profile data on donors, alumni, parents and some faculty, staff and students. Harvard's disclosure notice lists email addresses, telephone numbers, home and business addresses, event attendance, donation details and other biographical information tied to fundraising and alumni engagement.
Detalhes técnicos
- The article does not describe the intrusion method, initial access vector or any CVE.
- The affected data comes from alumni and fundraising systems, and the extortion model was "pay or leak".
Remediação
- HIBP advises affected users to change any password tied to the breach and to enable 2FA where supported.
- It also recommends using a password manager to generate unique passwords.
Linha do tempo
-
Harvard University alumni and fundraising data breach tied to ShinyHunters extortion exposes 851k email addresses
ler a análise desta fonte ocultar
In November 2025, Harvard University suffered a data breach later linked to a ShinyHunters "pay or leak" extortion attempt. Have I Been Pwned added the dataset on 3 Nov 2026, covering about 851k unique email addresses (850.5k affected addresses) from the university's alumni and fundraising systems. The records include extensive profile data on donors, alumni, parents and some faculty, staff and students. Harvard's disclosure notice lists email addresses, telephone numbers, home and business addresses, event attendance, donation details and other biographical information tied to fundraising and alumni engagement.
Technical Details
- The article does not describe the intrusion method, initial access vector or any CVE.
- The affected data comes from alumni and fundraising systems, and the extortion model was "pay or leak".
Remediation
- HIBP advises affected users to change any password tied to the breach and to enable 2FA where supported.
- It also recommends using a password manager to generate unique passwords.