Harvard University discloses data breach affecting alumni, donors

Harvard just fessed up to a sneaky voice phishing attack that infiltrated their Alumni Affairs and Development systems, exposing email addresses, phone numbers, home/business details, event logs, donation records, and some bio info for alumni, donors, spouses, student parents, and even a few faculty and staff—thankfully, no SSNs, passwords, or financial data got hit. This isn’t their first rodeo; they’re already probing with cops and cyber pros after discovering the breach on November 18, 2025, and quickly sent out warnings to affected folks on November 22. As SMBs and MSPs know all too well, these incidents highlight why robust phishing defenses like multi-factor auth and employee training are non-negotiable to keep bad actors at bay. And with other Ivy League schools like Princeton and Penn also dealing with similar donor data leaks, it’s a stark reminder to stay vigilant against social engineering tactics that could target your own customer or client info. If you’re running a small biz, double-check your systems for weak spots and educate your team on spotting phishy calls or messages before they turn into a headache.

Source: https://www.bleepingcomputer.com/news/security/harvard-university-discloses-data-breach-affecting-alumni-donors/