Harvard data breach
In November 2025, Harvard suffered a data breach that exposed charitable donations, citizenship statuses, dates of birth, education levels, email addresses, employers, ethnicities, family members' names, genders, job titles, marital statuses, names, occupations, phone numbers, physical addresses, places of birth, salutations, and social media profiles. The breach affected 850,537 accounts. If you had an account there, change your password there, never reuse it anywhere else, and check your email address with the free scan.
- Breach date
- November 18, 2025
- Added to this tracker
- November 3, 2026
- Accounts affected
- 850,537
- Company domain
- harvard.edu
- Data exposed
- Charitable donations, citizenship statuses, dates of birth, education levels, email addresses, employers, ethnicities, family members' names, genders, job titles, marital statuses, names, occupations, phone numbers, physical addresses, places of birth, salutations, and social media profiles
Was my information in the Harvard breach?
We cannot tell you that from this page. If you had an account with Harvard before November 2025, your information may have been included. The free Ghost Delete scan checks your email address against known data breaches, so run it to see whether your address shows up.
Run the free breach scan to check your email address now.
What data was exposed?
In the Harvard breach, the exposed data was charitable donations, citizenship statuses, dates of birth, education levels, email addresses, employers, ethnicities, family members' names, genders, job titles, marital statuses, names, occupations, phone numbers, physical addresses, places of birth, salutations, and social media profiles.
What should I do now?
- Change your password at Harvard right away, and anywhere else you reused it.
- Never reuse passwords: give every account a unique password.
- Watch for phishing emails and messages that use the exposed data to look convincing, and go to the site directly instead of clicking links.
- Run the free breach scan to check your email address against other breaches.
Removing yourself from data brokers is a bigger job than one breach. The DIY removal guide walks through doing it yourself, and Ghost Delete does it for you.