Elite universities like Harvard, Princeton and Columbia spend fortunes on research, talent and digital infrastructure. Even then, they’ve become easy targets for attackers who see massive databases filled with personal information and donation records as a goldmine. Over the past few months, breaches across Ivy League campuses have exposed the same problem. These institutions handle huge amounts of sensitive data, but their internal defenses often don’t match the scale of what they store. That pattern brings us to Harvard’s newest incident, which exposed a database of alumni, donors, some students and faculty to hackers.

Sign up for my FREE CyberGuy Report

Get my best tech tips, urgent security alerts, and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM newsletter.

CHECK IF YOUR PASSWORDS WERE STOLEN IN HUGE LEAK

Elite universities hold massive troves of personal and financial data that make them irresistible targets for attackers. (Photo by Aaron M. Sprecher/Getty Images)

A phone phishing attack unlocks Harvard’s data

Harvard confirmed that a database tied to alumni, donors, faculty and some students was accessed by an unauthorized party. This happened after a phone phishing attack tricked someone into giving the attacker a way into the system.

“On Tuesday, November 18, 2025, Harvard University discovered that information systems used by Alumni Affairs and Development were accessed by an unauthorized party as a result of a phone-based phishing attack,” the university said in a notification posted on its website. “The University acted immediately to remove the attacker’s access to our systems and prevent further unauthorized access.”

The exposed data includes personal contact details, donation histories and other records tied to the university’s fundraising and alumni operations. For Harvard, a school that routinely raises more than a billion dollars a year, this database is one of its most valuable assets, which makes the breach even more serious.

This is also the second time Harvard has had to investigate a breach in recent months. In October, it looked into reports that its data was caught up in a broader hacking campaign targeting Oracle customers. That earlier warning already showed that the school sits in a high-risk category. This latest breach only confirms it.

SCAMMERS NOW IMPERSONATE COWORKERS, STEAL EMAIL THREADS IN CONVINCING PHISHING ATTACKS

Harvard’s latest breach began with a phone phishing scam that let an intruder access a key alumni and donor database. (Jens Büttner/picture alliance via Getty Images)

Ivy League schools are in a growing crisis

Harvard isn’t alone here. Ivy League campuses have seen a wave of incidents that line up almost back-to-back. Princeton reported on November 15 that one of its databases tied to alumni, donors, students and community members was compromised.

The University of Pennsylvania said on October 31 that information systems connected to its development and alumni activities were accessed without permission. Columbia has been dealing with an even larger fallout. A breach in June exposed the personal data of roughly 870,000 people, including students and applicants.

These attacks show how universities have become predictable targets. They store identities, addresses, financial records and donor information. They also run sprawling IT systems where a single mistake, a weak password or a convincing phone call can create an entry point.

Hackers know this, and they strike repeatedly. The recent cluster of Ivy League breaches suggests that attackers are mapping these environments, looking for shared weaknesses that appear again and again.

NEW EMAIL SCAM USES HIDDEN CHARACTERS TO SLIP PAST FILTERS

A wave of incidents across Ivy League campuses shows hackers are exploiting the same weaknesses again and again. (Kurt “CyberGuy” Knutsson)

7 steps you can take to protect yourself from such data breaches

You can’t stop a university or company from being breached, but you can make sure that your own information is harder to exploit. These steps help you reduce the fallout when your data ends up in the wrong hands.

1) Turn on two-factor authentication (2FA)

Using 2FA gives your accounts an extra layer of security. Even if someone steals your password in a breach, they still need the one-time code from your phone or authentication app. It blocks most casual attempts and forces attackers to work much harder.

2) Use a password manager

A password manager creates and stores strong, unique passwords for every site you use. This keeps one compromised password from unlocking everything else. It also removes the stress of remembering dozens of logins, so you don’t cut corners.

Next, see if your email has been exposed in past breaches. Our #1 password manager pick includes a built-in breach scanner that checks whether your email address or passwords have appeared in known leaks. If you discover a match, immediately change any reused passwords and secure those accounts with new, unique credentials.

Check out the best expert-reviewed password managers of 2025 at Cyberguy.com

3) Reduce the personal info floating around

You can request takedowns from data broker sites, delete old accounts and trim what you share publicly. When your information isn’t scattered across the internet, attackers have a much harder time piecing together your identity.

While no service can guarantee the complete removal of your data from the internet, a data removal service is really a smart choice. They aren’t cheap, and neither is your privacy. These services do all the work for you by actively monitoring and systematically erasing your personal information from hundreds of websites. It’s what gives me peace of mind and has proven to be the most effective way to erase your personal data from the internet. By limiting the information available, you reduce the risk of scammers cross-referencing data from breaches with information they might find on the dark web, making it harder for them to target you.

Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com

Get a free scan to find out if your personal information is already out on the web: Cyberguy.com

4) Be cautious with emails, texts and calls

Phishing doesn’t always come as obvious scam mail. Attackers spoof institutions, copy their tone, and pressure you into sharing details quickly. Slow down, verify the message through an official website or helpline, then decide.

The best way to safeguard yourself from malicious links is to have strong antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe.

Get my picks for the best 2025 antivirus protection winners for your Windows, Mac, Android & iOS devices at Cyberguy.com

5) Keep your devices fully updated

Many attackers rely on old flaws in operating systems, browsers and apps. Regular updates patch these holes and shut down the most common attack paths. If you’re someone who delays updates, turning on automatic updates helps.

6) Separate your online identities

Use alias email addresses for banking, education, shopping and newsletters. If one of them gets exposed, it won’t automatically give attackers a map of your entire digital life. It makes targeted scams much harder to pull off, and also stops attackers from stealing your identity. By creating email aliases, you can protect your information and reduce spam. These aliases forward messages to your primary address, making it easier to manage incoming communications and avoid data breaches.

For recommendations on private and secure email providers that offer alias addresses, visit Cyberguy.com

7) Use an identity theft protection service

You might also want to consider an identity theft protection service to be on the safe side. Identity Theft companies can monitor personal information like your Social Security Number (SSN), phone number and email address, and alert you if it is being sold on the dark web or being used to open an account. They can also assist you in freezing your bank and credit card accounts to prevent further unauthorized use by criminals.

See my tips and best picks on how to protect yourself from identity theft at Cyberguy.com

Kurt’s key takeaway

Harvard’s latest breach adds to a growing list of cyberattacks that show how vulnerable top universities have become. Even the most well-funded institutions aren’t keeping pace with modern threats. When a simple phone phishing call can open the door to sensitive data tied to donors, alumni and students, it’s clear that these campuses need stronger defenses and more proactive monitoring. Until that happens, you can expect more headlines like this and more investigations after the damage is already done.

Do you trust universities to protect the personal data you’ve shared with them? Let us know by writing to us at Cyberguy.com

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Sign up for my FREE CyberGuy Report Get my best tech tips, urgent security alerts, and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM newsletter. 

Copyright 2025 CyberGuy.com. All rights reserved.

Air taxis keep gaining momentum, yet one challenge keeps resurfacing: many cities have few places for them to land. AutoFlight believes it has an answer. The company introduced a zero-carbon water vertiport that moves across rivers, lakes or coastal zones. This solar-powered platform works as a mobile hub for electric vertical take-off and landing (eVTOL) aircraft and aims to remove one of the biggest barriers to growth.

Sign up for my FREE CyberGuy Report

Get my best tech tips, urgent security alerts, and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM newsletter.

THE WORLD’S FIRST FLYING CAR IS READY FOR TAKEOFF

AutoFlight’s solar-powered water vertiport shows how air taxis could finally gain flexible landing spots. (AutoFlight)

The landing bottleneck that held air taxis back

eVTOL air taxis promise quick trips that jump over traffic and turn long drives into short flights. That idea first appeared in the 1940s and 50s when helicopter passenger services launched in the US and Britain. Those early attempts faded because they could land in only a handful of places. Rooftops and scattered piers created new congestion points. Without enough landing pads, the entire system stalled.

AutoFlight’s new floating vertiport flips the model. Instead of forcing cities to build fixed sites that take years to complete, the vertiport travels to the aircraft.

PENNSYLVANIA BILL SEEKS TO LEGALIZE FLYING CARS

The mobile platform supports fast charging and takeoffs for several eVTOL aircraft in real-world conditions. (AutoFlight)

Inside the zero-carbon water vertiport

The vertiport sits on a self-propelled barge with a deck lined with solar panels. It uses clean energy to charge eVTOLs without relying on grid power. A small cabin serves as a departure lounge and technical room. Operators can reposition the platform wherever demand rises, which gives cities far more flexibility.

It works with several AutoFlight aircraft. That includes the six-seat Prosperity passenger craft and the White Shark and CarryAll vehicles used for cargo and industrial tasks. All can land, recharge, and take off from the same floating hub.

Because the platform runs on solar power and needs no major construction, it can be deployed much faster than any land-based site.

First public demo on the water

AutoFlight showed the full system on November 22 at Dianshan Lake near Shanghai. A 2-ton-class eVTOL took off from the floating vertiport during a public test. The company also flew three aircraft in formation and completed live airdrop missions with supplies and life rafts. The event highlighted how the system supports emergency work and low-altitude logistics.

THE WORLD’S FIRST FLYING CAR IS READY FOR TAKEOFF

The system highlights how floating hubs may expand air mobility across commuting, emergency work and tourism.  (AutoFlight)

Five sectors this system could reshape

This new platform supports a wide range of real-world uses that reach far beyond simple city travel.

Marine energy maintenance

Offshore wind sites and oil rigs often wait hours for parts or personnel. AutoFlight says the system could improve transport efficiency more than tenfold.

Emergency response

Teams can pair wide-area searches with fast aerial response. This cuts reaction time by over half and boosts survival odds.

High-frequency commuting

Cities along rivers and bays could build quick air routes without touching roads.

Marine-aerial tourism

Tour operators could add a “flight plus water” experience to premium trips.

Mobile vertiport clusters

Multiple floating hubs can link into a network during peak travel or disaster relief missions.

How AutoFlight pushes clean air mobility

Sustainable aviation keeps gaining importance. AutoFlight partnered with CATL to integrate high-safety batteries into both its aircraft and vertiports. The system uses clean energy and low-impact infrastructure. It taps underused water surfaces and avoids major construction. Cities can deploy these pads quickly, which helps air mobility grow sooner.

What this means for you

Air taxis may feel far off, yet this solution tackles a real problem. Landing and charging sites remain the missing link. Floating vertiports open the door to fast routes between airports and city centers. They also set the stage for quick regional hops that cut travel times and reduce stress. Tourism operators may even use them to launch new water-to-air experiences.

Take my quiz: How safe is your online security?

Think your devices and data are truly protected? Take this quick quiz to see where your digital habits stand. From passwords to Wi-Fi settings, you’ll get a personalized breakdown of what you’re doing right and what needs improvement. Take my Quiz here: Cyberguy.com. 

Kurt’s key takeaways

Air taxis cannot expand without more places to land. AutoFlight’s solar water platform offers a practical option that uses clean energy and fast deployment. If cities embrace this model, air mobility could shift from concept to daily use faster than expected.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Would you feel comfortable boarding an air taxi from a floating platform? Let us know by writing to us at Cyberguy.com

Sign up for my FREE CyberGuy ReportGet my best tech tips, urgent security alerts, and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM newsletter.

A troubling message landed in our inbox, and it reveals a scam that many people have never seen. Before we break it down, here is the email that Gary from Palmetto, Florida, sent us:

“This just happened to a friend of mine. It’s the first time I’ve heard of this scam. She bought a new phone from Spectrum. 2 days later, she got a call saying they were from Spectrum and told her that they’d accidentally given her a refurbished phone rather than a new one and asked her to send it back, which he did. However, that night she got the feeling that something wasn’t right. She contacted UPS the next day and Spectrum, and verified that it was a scam, and fortunately was able to get her phone back, but UPS told her that they actually changed the return address and the address it was going to as soon as it was shipped. She was just darn lucky she got her phone back. But like I say, this is something new. Nobody I’ve talked to has heard of it yet,” it wrote.

This experience shows how quickly scammers evolve. It also highlights how important fast action can be when something feels off.

HOW 3.5B WHATSAPP NUMBERS WERE SCRAPED AND EXPOSED

Sign up for my FREE CyberGuy Report 
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM newsletter.

Scammers time their calls right after a new phone delivery to make the story feel real. (Cyberguy.com)

How this new phone return scam works

You may avoid this scam when you know the steps criminals use to pull it off. Here is how they operate.

1) Scammers track recent purchases

They start by watching recent phone or carrier purchases through leaked data, phishing or stolen shipment information. Because they know when a phone was delivered, they can time the call with precision.

2) They call with a convincing story

Next, they pretend to represent Spectrum or another carrier. They claim a mix-up happened and say the customer received a refurbished device. Since the call ties directly to a real purchase, the story feels believable.

3) They pressure the victim to ship the phone

After that, they send a prepaid label that looks official. Once the victim ships the phone, they alter the destination through UPS or FedEx tools or hacked accounts. As a result, the device gets rerouted fast.

4) They follow up to reduce doubt

Sometimes they even send a second message or call to confirm receipt. This extra touch delays the moment the victim realizes the package went to a different address.

5) Quick action saved Gary’s friend

Gary’s friend sensed something felt wrong. She contacted UPS and Spectrum right away which allowed them to intercept the shipment before final delivery.

FAKE AGENT PHONE SCAMS ARE SPREADING FAST ACROSS THE US

Steps to protect yourself from phone return fraud

These simple actions can stop this scam early and keep your new phone safe.

1) Confirm every return request

Always check with your carrier through its official phone number or website chat before you ship a device.

2) Ignore labels sent by callers

Treat any label that appears outside your verified online account as suspicious since scammers use these to reroute packages.

3) Ship only after confirming the address

Use your own shipping and send the phone only after you verify the correct return address with your carrier.

4) Watch for pressure

Scammers use phrases like we made a mistake or we will credit your account to push quick action. Slow down and confirm before you do anything.

5) Add a carrier account PIN

Create a PIN and turn on two-factor authentication (2FA) to protect your account from unauthorized access.

Fake return labels look official, which makes victims believe they are sending the phone back to the carrier. (REUTERS/Thomas Peter/File Photo)

6) Use a strong antivirus software 

Strong antivirus software blocks phishing sites and dangerous links that scammers use to steal account data. It also warns you about scam calls and messages tied to known threats.

The best way to safeguard yourself from malicious links that install malware, potentially accessing your private information, is to have strong antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe.

Get my picks for the best 2025 antivirus protection winners for your Windows, Mac, Android and iOS devices at Cyberguy.com.

7) Use a personal data removal service

A data removal service pulls your information off people search sites that expose your address, carrier details and phone number. Lowering that exposure reduces targeted scam calls.

While no service can guarantee the complete removal of your data from the internet, a data removal service is really a smart choice. They aren’t cheap, and neither is your privacy. These services do all the work for you by actively monitoring and systematically erasing your personal information from hundreds of websites. It’s what gives me peace of mind and has proven to be the most effective way to erase your personal data from the internet. By limiting the information available, you reduce the risk of scammers cross-referencing data from breaches with information they might find on the dark web, making it harder for them to target you.

THIS IS WHAT YOU ARE DOING WRONG WHEN SCAMMERS CALL

Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com.

Get a free scan to find out if your personal information is already out on the web: Cyberguy.com.

8) Check your account for any new orders or changes

Scammers sometimes add fake orders or create return requests inside your carrier account. Reviewing your activity can reveal tampering quickly. Check your carrier account for new orders or changes. Look for return requests, shipping labels or edits you did not make.

9) Turn on shipping alerts for packages

Most carriers and shipping companies let you enable text or email alerts. This makes it harder for scammers to reroute a package without you knowing. Turn on delivery alerts with UPS, FedEx or USPS. Real-time updates help you catch reroutes before your device moves too far.

10) Protect your shipping login

Scammers often use stolen UPS or FedEx credentials to change addresses. Secure your UPS or FedEx accounts with strong passwords. This limits unauthorized access that scammers rely on. Consider using a password manager, which securely stores and generates complex passwords, reducing the risk of password reuse.

Next, see if your email has been exposed in past breaches. Our No. 1 password manager pick includes a built-in breach scanner that checks whether your email address or passwords have appeared in known leaks. If you discover a match, immediately change any reused passwords and secure those accounts with new, unique credentials.

Quick action with UPS or the carrier can stop the scam before the package reaches the wrong hands.  (iStock)

Check out the best expert-reviewed password managers of 2025 at Cyberguy.com.

11) Avoid reading label numbers out loud over the phone

Some scammers ask victims to read tracking numbers or label details. They use these codes to hijack shipments. Never share tracking numbers or label details with anyone who calls you. Scammers use those numbers to redirect packages.

12) Report attempted fraud

Your report helps carriers investigate similar attempts. Report any suspicious calls to your carrier’s fraud department. Your story can help protect other customers from the same scheme.

Kurt’s key takeaways

Phone return scams keep spreading because scammers watch for any moment when people feel rushed or distracted. When a new device arrives, most of us feel excited and eager to get it set up, which gives criminals a narrow window to strike. Taking a few simple steps to verify every return request can shut down the entire scheme before it reaches your door. Slow down, check the details, and trust your instincts if anything feels off. Your caution can save you from losing a brand-new phone to a convincing lie.

What scam attempts have you or someone you know run into lately that others should know about? Let us know by writing to us at Cyberguy.com.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Sign up for my FREE CyberGuy Report 
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM newsletter. 

Copyright 2025 CyberGuy.com.  All rights reserved.