Harvard University
ent_7c6a1a05daa96d01
Disclosures
2
State AG · Leak Site · 2 jurisdictions
Incidents
—
no linked incident in sample
Max affected reported
4
as filed · State AG NH
Leak-site claims
1
unverified actor claims
Identity resolution
- Canonical name
- Harvard University
- Normalized
- harvard university— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (2)newest first
- ⛰️New Hampshire State AGas victim2026-02-06
Harvard University notified the New Hampshire Attorney General on February 6, 2026, regarding a data incident involving the CL0p threat actor. The actor exploited a zero-day vulnerability in an Oracle E-Business Suite application between August 9 and August 20, 2025, to exfiltrate and publish data. The breach affected 4 New Hampshire residents, exposing names, addresses, and Social Security numbers. Harvard engaged forensic experts, applied Oracle's patch, and is providing two years of credit monitoring to affected individuals.
- GLOBALLeak Siteas victim2026-02-04
Size: 1.1GB (compressed) | Updated: 04 Feb 2026 | Note: Make the right decision, don't be the next headline. | This is the direct result of advisors advising you against paying a ransom. It has the opposite effect. Do NOT provoke us again and pay the ransom when we contact you.