#  Cybersecurity alert: Harvard IT impersonation and fake HarvardKey login page 

 





April 03, 2026

 

 

Dear Members of the Harvard Community,  
  
The University is monitoring an **active and specific cybersecurity threat** involving individuals **impersonating Harvard IT staff** to gain access to University accounts and data.

- **Be on high alert for unsolicited communications claiming to come from “Harvard IT”** asking you to initiate a live voice call and / or directing you to fake Harvard websites not ending in ".edu" (e.g., “harvardkey dot com”).
- **Do not log in, install software, or execute commands** on your computer or device as part of such a call.

If you believe you have been targeted by this threat, or that your account may have been compromised, **report it immediately** to the **HUIT Service Desk at 617-495-7777**. Mere minutes can make the difference in Harvard’s ability to protect you and the University.  
  
Sincerely,  
  
Michael Tran Duff  
University Chief Information Security and Data Privacy Officer