Hackers Publish Personal Information Stolen During Harvard, Upenn Data Breaches - Beritaja

A notorious hacking group has claimed work for past year’s information breaches astatine Harvard University and the University of Pennsylvania (UPenn) and published the information that they declare to person stolen from the 2 schools. 

On Wednesday, the group known arsenic ShinyHunters published what it claims are much than 1 cardinal records from each assemblage connected the group’s dedicated leak site, which the pack uses to extort its victims.

In November, UPenn confirmed a information breach of “a prime group of accusation systems related to Penn’s improvement and alumni activities.” At the time, the hackers besides sent alumni emails announcing the hack from official assemblage addresses. 

The assemblage blamed the breach connected social engineering, an onslaught that often relies connected hackers impersonating personification and tricking them into doing thing they would not usually do. In its official breach disclosure web page, which has since been taken offline, UPenn did not opportunity precisely what type of information the hackers stole, simply saying the cybercriminals accessed “systems related to Penn’s improvement and alumni activities.”

TechCrunch verified a information of the information group by confirming pinch alumni and nationalist records, specified arsenic matching the information against student ID numbers.

Later successful November, Harvard University besides confirmed a breach connected its alumni systems, blaming it connected a sound phishing attack, meaning an onslaught wherever hackers tricked the targets into clicking connected a nexus aliases opening an attachment pinch a sound call. 

Harvard said that the stolen information included email addresses, telephone numbers, location and business addresses, arena attendance, specifications of donations to the university, and different biographical accusation relating to the university’s fundraising and alumni engagement activities.

The information published by ShinyHunters, which TechCrunch has seen, appears to lucifer the type of accusation that some universities said was stolen past year. 

The hackers said they published the stolen information because the universities refused to salary a ransom to extremity them from doing so. Cybercriminals for illustration ShinyHunters often effort to extort their victims asking for costs successful speech for not publishing the information they stole, and if the victims garbage payment, they past merchandise the information online. 

During the UPenn breach, the hackers made it look for illustration they had governmental motives, successful peculiar they expressed discontent pinch affirmative action policies. “We prosecute and admit morons because we emotion legacies, donors, and unqualified affirmative action admits,” the hackers wrote successful the email sent to alumni. 

ShinyHunters is not known to person governmental motives. The hackers did not respond to a mobility asking why they included that connection successful the email. 

Penn spokesperson Ron Ozio told TechCrunch that the assemblage is “analyzing the information and will notify immoderate individuals if required by applicable privateness regulations.”

Harvard did not respond to a petition for comment.