Technology News and Headlines

Two Ivy League Universities Had Donor Information Breaches. Will Donors Be Notified?

Harvard University disclosed a November phishing attack that exposed alumni, donor and limited staff data, while the University of Pennsylvania confirmed a ShinyHunters intrusion that accessed Salesforce, SAP and other systems, compromising roughly 1.2 million students, alumni and donors. Both breaches lacked Social Security numbers or payment‑card details, meaning state notification statutes may not compel alerts. Harvard’s public FAQ remains static and UPenn’s communications have shifted from notifying only ten individuals to claiming a completed review, creating uncertainty. The incidents raise questions about donor privacy and institutional transparency.