Penn
Disclosed Dec 30, 20214 years ago227,769 affectedConfirmed
What is known
| People affected | 227,769 (as reported by the organization) |
|---|---|
| Disclosed | Dec 30, 2021 |
| Discovered | Oct 10, 2021 |
| Happened | Nov 1, 2019 |
| Attack | Hacking |
| Data exposed | Names, Credentials and tokens |
| Sector | Other · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Pennoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: Pennatg.wa.gov · Official notice | Official notice |
| Notice letter filed with the Delaware DOJ: Pennattorneygeneral.delaware.gov · Official notice | Official notice |
| Oregon DOJ breach notice: Pennjustice.oregon.gov · Official notice | Official notice |
| Indiana Attorney General 2022 data breach report: Pennin.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Washington AGresidents of WA | Dec 30, 2021 | 4,302 |
| Oregon DOJresidents of OR | Jan 14, 2022 | 201,000 |
| Delaware DOJresidents of DE | Jan 24, 2022 | 904 |
| California AGresidents of CA | Jan 25, 2022 | |
| Indiana AGresidents of IN | Jan 25, 2022 | 4,028 |
| California AGresidents of CA | Mar 15, 2022 |
History of this record
- 2026-09-25 · records: 201000 to 227769 · backfill source
- 2026-09-25 · data_types: [] to ["names","credentials"] · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 201000 · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · disclosed: 2022-01-25 to 2021-12-30 · backfill source
- 2026-09-25 · discovered: empty to 2021-10-10 · backfill source
- 2026-09-25 · disclosed: 2022-03-15 to 2022-01-25 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.