Every public data breach

47 disclosed this week · 26,367 on record

University of California

Disclosed May 13, 2021547,422 accountsConfirmed

Official notice

In December 2020, the University of California suffered a data breach due to vulnerability in in a third-party provider, Accellion . The breach exposed extensive personal data on both students and staff including 547 thousand unique email addresses, names, dates of birth, genders, social security numbers, ethnicities and other academic related data attributes. Further analysis is available in Exploring the Impact of the UC Data Breach . The data was provided to HIBP courtesy of Cyril Gorlla.

What is known

People affected547,422 (accounts in the leaked data, per Have I Been Pwned)
DisclosedMay 13, 2021
HappenedDec 24, 2020
AttackSupply chain
Data exposedDates of birthEducation recordsEmailsEmploymentNamesPhone numbersAddressesGovernment IDs
SectorEducation · US
StatusConfirmed
Check your emailHave I Been Pwned

Sources

Notices filed

History of this record
hibp2026-09-25
empty to UCby backfillSource
attack2026-09-25
unknown to supply-chainby backfillSource
data_types2026-09-25
[] to ["dob","education","emails","employment","names","phone","addresses","government-id"]by backfillSource
records_basis2026-09-25
empty to hibpby backfillSource
records2026-09-25
empty to 547422by backfillSource
summary2026-09-25
empty to In December 2020, the University of California suffered a data breach due to vulnerability in in a third-party provider, Accellion . The breach exposed extensive personal data on both students and staff including 547 thousand unique email aby backfillSource
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about University of California