Harvard University: Alleged 1.16…

MediumBreachNo software to update

In 30 seconds

Alleged

A newer dark-web listing allegedly offers about 1.16 million Harvard alumni and donor records for cryptocurrency. It is more detailed than an earlier “full database” advertisement, but the claim remains unverified: no full dataset has been published, and Harvard has not commented.

What happened

Alleged

DailyDarkWeb first reported a vague advertisement claiming to contain Harvard personal, passport and payment-related information. A later report described a different listing with a record count, specific alumni and fundraising fields, and an offered sample. The evidence does not establish whether the two listings are connected or whether either contains authentic Harvard data.

Why it matters

Inferred

Even an unverified sale claim can provide material for convincing scams. DailyDarkWeb assesses that alumni and donors could face targeted email phishing, voice phishing and donation fraud using purported biographical, academic or giving details.

What to do

Inferred

Harvard students, staff, alumni and donors should treat unexpected requests involving payments, passports, donations or account access with caution. Verify requests through an official Harvard channel rather than using contact details or links supplied in the message.

Confirmed and still uncertain

Observed

What is observable is limited to reports of forum advertisements and their stated contents. There is no published full dump, the earlier listing provided no sample, record count, file size or breach date, and no Harvard response is included. The later post says a sample was offered, but it does not independently validate that sample.

What people are saying

Inferred

DailyDarkWeb explicitly labels both reports unverified. Its analysis says the earlier “full database” claim could be recycled or exaggerated, while the newer field list resembles an alumni-advancement customer relationship management export and might contain data recirculated from an earlier incident.

Evolution

Inferred

The picture changed from a single vague advertisement with no supporting details to a separate, more specific offer claiming roughly 1.16 million records and an available sample. That added specificity makes the newer claim easier to examine, but it does not turn the advertisement into proof of a breach or confirm the data’s origin.

Reach

Observed

1 independent groups, 4 updates, and 23 engagements.

Technical detail

Alleged

The newer listing allegedly includes names, birth dates, addresses, phone numbers, emails, spouse and employer details, degrees, graduation and housing information, lifetime giving, donor prospect ratings, Harvard IDs and HarvardKey usernames. The report says passwords were not listed. The earlier, less detailed advertisement separately mentioned passport and payment-related information.

Sources and evidence

Observed

The available evidence consists of two DailyDarkWeb posts summarizing alleged dark-web forum advertisements and showing related images. Neither post supplies a published full dataset, independent forensic confirmation or a statement from Harvard, so authenticity, freshness, provenance and any connection between the listings remain unresolved.