Higher Education Under Siege: A Wave of Cyberattacks Exposes Systemic Vulnerabilities In the first half of 2025, a surge of cyberattacks has targeted major U.S. universities, exposing critical weaknesses in higher education’s cybersecurity defenses. The University of Pennsylvania, Harvard University, and Princeton University all reported breaches within the past two months, following earlier incidents at Columbia University, Dartmouth College, and New York University. Each institution confirmed the attacks stemmed from social engineering, with Harvard and Princeton specifically citing phone-based phishing as the entry point. Officials at the affected schools stated they acted swiftly to contain the breaches and are reinforcing security measures. However, experts warn that universities face an uphill battle. Mike Corn, a former chief information security officer in higher education and current consultant at Vantage Technology, noted that colleges operate like "small cities," with decentralized networks, personal devices, and diverse user behaviors creating countless vulnerabilities. Even robust investments in cybersecurity, he argued, cannot guarantee immunity from attacks—especially as AI-driven threats grow more sophisticated. The challenges extend beyond technology. Brian Nichols, CIO at the University of Kentucky, highlighted that while phishing simulations and training have improved awareness, they are not foolproof. Anita Nikolich, director of research and technology innovation at the University of Illinois at Urbana-Champaign, warned that punitive security measures can backfire, alienating faculty who may resist protocols perceived as restrictive. A core tension lies in academic freedom versus centralized IT control: many universities allow individual departments—such as medical or business schools—to maintain separate IT teams, increasing risk. Nikolich, who previously led IT infrastructure at the University of Chicago, described this fragmentation as a "huge risk factor," as decentralized systems complicate consistent security enforcement. Faculty resistance further complicates the issue. Janice Lanham, a nursing lecturer at Clemson University, nearly fell victim to a phishing scam but caught the deception in time. Yet, as Brian Voss, Clemson’s CIO, observed, some professors view security protocols as obstacles to research and teaching. Voss described a "culture of subservience" in higher-ed IT, where departments prioritize faculty demands over security, often retaining excessive data—including sensitive information like Social Security numbers—despite the risks. His efforts to reduce data storage have met resistance, with one university even retaining personal data for voter registration purposes, creating what he called "piles of gold for bad guys." The conflict between research needs and security is particularly acute. Nikolich, who also conducts quantum computing research, faced initial pushback when requesting network data for her work. After demonstrating the data’s non-sensitive nature and potential security benefits, she gained access—but noted that other universities default to blanket denials. When researchers are blocked, she warned, they often bypass official channels, increasing exposure. The solution, Nikolich suggested, lies in collaboration: IT, security teams, and faculty must treat cybersecurity as a shared priority, balancing innovation with protection. Until then, universities remain prime targets—caught between the demands of open academic environments and the escalating sophistication of cyber threats.

HANOVER, N.H. (WCAX) - A data breach at Dartmouth College compromised the personal information of roughly 40,000 people. Dartmouth said an unknown person targeted Oracle’s eBusiness Suite software the college uses. Past and present students and employees are affected. Varying levels of personal information were potentially stolen. Dartmouth is in the process of notifying everyone involved. Multiple other colleges and businesses were victims. “Dartmouth is notifying and offering support to individuals whose data was included in this incident in accordance with applicable law,” said Dartmouth spokesperson Jana Barnello. She added that the incident was not the result of any phishing attack on a member of the Dartmouth community or any other action or inaction on Dartmouth’s part. Copyright 2025 WCAX. All rights reserved.

Dartmouth College has confirmed that a cybersecurity breach compromised the personal data of over 40,000 individuals, including nearly 32,000 in New Hampshire and more than 12,000 in Vermont, after hackers exploited a vulnerability in a widely used software system. The attack, which occurred over a three-day span in early August, targeted the Oracle eBusiness Suite, software used by Dartmouth and other institutions to manage operations. [RELATED: Dartmouth faculty denounce Trump admin’s higher ed compact as ‘fascist’ and ‘unconstitutional’] A known ransomware group has claimed responsibility for the breach according to Valley News, which has reportedly affected over 100 organizations. According to filings with state attorneys general, the compromised data includes names, Social Security numbers, and financial account details. Dartmouth began notifying victims by mail last week and is offering a year of free identity protection through Experian. [RELATED: Dartmouth president refuses to join Ivy League push against Trump, pledges institutional neutrality] Dartmouth says the breach was not caused by phishing or internal user error. After Oracle disclosed the issue in October, the college launched an investigation and confirmed on Oct. 30 that sensitive data had been accessed. Officials said time was needed to review affected files and identify impacted individuals. In response, Dartmouth has implemented all available security patches and set up a hotline for those affect

Dartmouth College suffered a major cybersecurity breach after the Cl0p ransomware gang exploited a zero-day vulnerability (CVE-2025-61884) in its Oracle E-Business Suite (EBS) system. The attackers gained unauthorized access between August 9–12, 2025, exfiltrating 226GB of sensitive data, including Social Security numbers (SSNs), bank account details (with routing numbers), personal names, and other PII of at least 1,494 individuals (primarily Maine residents), though the total impact is likely far larger. Despite Oracle releasing patches in October 2025, Dartmouth’s forensic investigation confirmed the breach only on October 30, 2025, with Cl0p later leaking the stolen data on its dark web site in November 2025. The incident highlights the gang’s targeted campaign against higher education institutions via unpatched EBS vulnerabilities, exposing victims to identity theft, financial fraud, and long-term reputational harm. The breach underscores critical failures in patch management, access controls, and incident response within the college’s ERP infrastructure.