Have I Been Pwned (HIBP) has added 851,000 unique email addresses from Harvard University’s November 2025 data breach to its breach database, revealing the scale of an intrusion into the university’s Alumni Affairs and Development systems.
The breach record lists names, email addresses, phone numbers, physical addresses, dates and places of birth, employment and education details, family members’ names, social media profiles and charitable donation information. The data relates to alumni, donors, parents and some faculty, staff and students.
Harvard said it discovered unauthorized access on November 18, 2025, after a phone-based phishing attack. In its incident notice, the university said the affected systems generally did not contain Social Security numbers, passwords, payment card information or financial account numbers. At the time, Harvard said it did not know precisely what information had been accessed.
HIBP links the dataset to a ShinyHunters “pay or leak” extortion attempt. Harvard’s public incident notice did not identify an attacker.
If this article helped you, please consider supporting our work. Every small contribution keeps Abijita.com independent and running.
