Personal data stolen during Harvard and UPenn data breaches leaked online - over a million details, including emails, home addresses and more, all published

• ShinyHunters leaked over one million records stolen from Harvard and UPenn onto their dark web site
• Data includes personal details, donation history, and demographic information from students, staff, alumni, and donors
• Breaches tied to SSO compromise and vishing; files published after failed ransom negotiations, with no encryptors used

Hacking group ShinyHunters has released all the files it stole from Harvard University and the University of Pennsylvania (UPenn) in late 2025.

The files are now apparently sitting on the hackers’ dark web site, available to other cybercriminals to download and exploit.

The group claims to have leaked more than a million records. Both organizations confirmed having been breached, while TechCrunch managed to verify a portion of the dataset.