Harvard University discloses data breach affecting alumni, donors

Harvard University disclosed a phone-based (voice) phishing compromise of its Alumni Affairs and Development systems discovered on November 18, 2025, which exposed contact information, home/business addresses, event attendance records, donation details, and fundraising biographical data for alumni, donors, some students, faculty, and staff; Harvard reports that Social Security numbers, passwords, and payment/financial data were not present in the affected systems. The university has engaged law enforcement and cybersecurity experts, sent breach notifications on November 22, 2025, and warned recipients to be vigilant for follow-on phishing or fraud.