A infamous hacking group has claimed accountability for final 12 months’s data breaches at Harvard College and the College of Pennsylvania (UPenn) and revealed the information that they declare to have stolen from the 2 faculties.
On Wednesday, the group generally known as ShinyHunters revealed what it claims are a couple of million information from every college on the group’s devoted leak web site, which the gang makes use of to extort its victims.
In November, UPenn confirmed a data breach of “a choose group of data methods associated to Penn’s growth and alumni actions.” On the time, the hackers additionally despatched alumni emails asserting the hack from official college addresses.
The college blamed the breach on social engineering, an assault that always depends on hackers impersonating somebody and tricking them into doing one thing they might not usually do. In its official breach disclosure internet web page, which has since been taken offline, UPenn didn’t say precisely what sort of information the hackers stole, merely saying the cybercriminals accessed “methods associated to Penn’s growth and alumni actions.”
Contact Us
Do you’ve got extra details about these breaches, or comparable assaults? From a non-work machine, you may contact Lorenzo Franceschi-Bicchierai securely on Sign at +1 917 257 1382, or through Telegram, Keybase and Wire @lorenzofb, or electronic mail.
information.killnetswitch verified a portion of the information set by confirming with alumni and public information, resembling matching the information in opposition to pupil ID numbers.
Later in November, Harvard College additionally confirmed a breach on its alumni methods, blaming it on a voice phishing assault, which means an assault the place hackers tricked the targets into clicking on a hyperlink or opening an attachment with a voice name.
Harvard stated that the stolen information included electronic mail addresses, cellphone numbers, house and enterprise addresses, occasion attendance, particulars of donations to the college, and different biographical info referring to the college’s fundraising and alumni engagement actions.
Techcrunch occasion
Boston, MA
|
June 23, 2026
The information revealed by ShinyHunters, which information.killnetswitch has seen, seems to match the kind of info that each universities stated was stolen final 12 months.
The hackers stated they revealed the stolen information as a result of the colleges refused to pay a ransom to cease them from doing so. Cybercriminals like ShinyHunters typically attempt to extort their victims asking for cost in change for not publishing the information they stole, and if the victims refuse cost, they then launch the information on-line.
Through the UPenn breach, the hackers made it seem to be that they had political motives, specifically they expressed discontent with affirmative motion insurance policies. “We rent and admit morons as a result of we love legacies, donors, and unqualified affirmative motion admits,” the hackers wrote within the electronic mail despatched to alumni.
ShinyHunters is just not recognized to have political motives. The hackers didn’t reply to a query asking why they included that language within the electronic mail.
Penn spokesperson Ron Ozio instructed information.killnetswitch that the college is “analyzing the information and can notify any people if required by relevant privateness rules.”
Harvard didn’t reply to a request for remark.
