Dartmouth College has reported a data breach involving its Oracle eBusiness Suite (“EBS”) environment, a system used widely by institutions around the world to manage key operational and administrative data. According to Dartmouth, a previously unknown zero-day vulnerability in Oracle EBS allowed an unauthorized actor to take files from multiple Oracle customer environments, including Dartmouth’s.
Whom Does the Data Breach Affect?
An investigation determined that someone accessed Dartmouth’s systems between August 9, 2025, and August 12, 2025, and removed certain files. After reviewing the compromised data, Dartmouth identified on October 30, 2025, that one or more files contained sensitive personal information belonging to members of the Dartmouth community.
This breach affects students, alumni, employees, and others whose information was stored in the compromised Oracle EBS environment. Dartmouth began issuing written notifications on November 24, 2025, informing affected individuals of the incident, what data was exposed, and what steps they can take to protect themselves.
How Dartmouth College Responded to the Data Leak
Dartmouth took several actions once the incident was discovered:
- Secured its systems and applied all publicly available patches associated with the Oracle EBS vulnerability.
- Notified law enforcement and launched a detailed forensic investigation to determine the scope of the breach.
- Implemented vendor-security reviews to help prevent similar incidents from occurring again.
- Offered one year of free Experian IdentityWorks identity-theft protection, including credit monitoring, internet surveillance, identity restoration, and $1 million in identity-theft insurance.
If you received a notification letter from Dartmouth College, or if you believe your information may have been included in the compromised files, it’s important to take immediate steps to reduce your risk. A data breach attorney can help answer your questions and protect you from further harm. If you wish to speak to a data privacy lawyer, contact our law firm today.
