Dartmouth College disclosed that hackers exploited Oracle E‑Business Suite (EBS) vulnerabilities in August and accessed files containing personal and financial information for more than 35,000 people across several states. The university patched the affected systems, notified state regulators and offered a year of identity protection to those impacted. The intrusion was part of a wider campaign against Oracle EBS users, and Dartmouth said it implemented publicly available security patches and is reviewing vendor practices. The stolen files reportedly included Social Security numbers and other sensitive identifiers. The incident underscores persistent cybersecurity risks at research‑intensive institutions that rely on commercial enterprise systems for financial and personnel operations. Colleges should expect intensified regulatory scrutiny and renewed pressure to harden vendor‑managed systems and breach‑response protocols.