Harvard University Reports Data Breach Linked to Phone Phishing Attack
CAMBRIDGE, Mass. (AP) — Harvard University said an unauthorized party gained access to a database containing personal information about alumni, donors, some students and faculty after a phone phishing attack earlier this week — the latest in a string of cyber intrusions targeting Ivy League institutions.
The breach occurred Tuesday and exposed contact information, donation records and data tied to fundraising and alumni engagement, the university said in a notice posted on its website.
Harvard, the nation’s oldest and wealthiest university, typically raises more than $1 billion each year and relies heavily on donor outreach. The incident follows a separate investigation launched in October after reports that Harvard was among the institutions affected in a hacking campaign targeting Oracle Corp. customers.
University officials didn’t say who might be behind the latest attack or whether the breach appeared to be part of a coordinated campaign across major U.S. colleges.
“We acted immediately to remove the attacker’s access to our systems and prevent further unauthorized access,” Tim Bailey, spokesperson for Harvard University Information Technology, said in a statement. He said the school is working with outside cybersecurity experts and law enforcement.
Higher education institutions have long been appealing targets for hackers, but elite universities have faced an unusual wave of attacks in recent months.
Princeton University confirmed Nov. 15 that a database containing information on alumni, donors, students and others connected to the campus community had been compromised. At the University of Pennsylvania, officials said Oct. 31 that some information systems used for development and alumni relations were also breached.
Columbia University reported in June that a cyberattack exposed personal data for about 870,000 people — including current students and applicants — prompting a wide-ranging investigation and notification effort.