Harvard University Discloses Second Data Breach

Harvard University—one of the most prestigious universities in the United States—disclosed a data breach over the weekend impacting its Alumni Affairs and Development systems.

The voice phishing attack exposed the personal information of students, alumni, donors, staff, and faculty members, and in some cases their family members. The information included email addresses, telephone numbers, home and business addresses, event attendance records, donation details, and "biographical information pertaining to University fundraising and alumni engagement activities."

The university says Social Security numbers, passwords, and financial information was not impacted.

This incident comes on the heels of a disclosure in October that the university was likely breached by the Clop ransomware gang using a zero-day in the school's Oracle E-Business Suite servers.