BleepingComputer reported on 3 November 2026 that hackers who breached Harvard University's Alumni Affairs and Development systems in November 2025 stole data linked to more than 850,000 unique email addresses, citing the breach notification service Have I Been Pwned, which BleepingComputer says analysed the leaked data and found it contained 851,000 unique email addresses relating to the university's alumni and fundraising systems, with profile information for donors, alumni, parents and some faculty, staff and students.

According to BleepingComputer, the exposed data includes names, email addresses, dates of birth, phone numbers, physical addresses and social media profiles.

Harvard discovered the breach on 18 November 2025, and Harvard's CIO said the breached systems did not store Social Security numbers, passwords, payment card information or financial information, BleepingComputer reports. Harvard has not attributed the attack.

According to BleepingComputer, the ShinyHunters extortion gang claimed responsibility. (source: BleepingComputer)

Correction (04 Nov 2026): removed Have I Been Pwned as a source; removed details no other source gives. (source: BleepingComputer)