Harvard University data breach exposed info of 851,000 accounts
The interesting detail here is that it hit the development office, not the core academic systems. That's the part that should focus people's attention. Alumni affairs and development databases are where universities keep the most commercially sensitive data they have: who gives, how much, and what they're willing to give again. A breach of that stack is a fundraising problem as much as a security one, because trust is the currency of major gifts.
I'd want to know what exactly was taken beyond email addresses. Have I Been Pwned only confirms accounts, but the real damage depends on whether the stolen records included giving histories, pledge amounts, or even bank details. If it's just emails, the risk is mostly phishing and credential stuffing. If it's deeper, Harvard has a reputational hole to dig out of that no number of apology emails will fill.
Universities keep getting hit like this, and it's not an accident. They run sprawling, decentralized IT estates with a mix of legacy systems and third-party fundraising tools, and they hold data on people who are often older and less security-savvy. I don't think this changes the fundamentals, but it should push development offices to treat their donor databases with the same rigor as a financial institution treats its ledgers.