University of Pennsylvania
Disclosed Oct 31, 202510 months ago442,500 affectedConfirmed
Hackers breach UPenn systems, send mass emails and steal donor data
Hackers used Penn email accounts to send offensive mass emails to alumni and students and claimed to have stolen donor data; Penn later confirmed data was stolen, and in December disclosed a separate breach through Oracle E-Business Suite.
What is known
| People affected | 442,500 (as reported by the organization) |
|---|---|
| Disclosed | Oct 31, 2025 |
| Discovered | Sep 29, 2025 |
| Happened | Aug 9, 2025 |
| Attack | Hacking |
| Data exposed | Names, Credentials and tokens, Dates of birth, Emails, Financial, Employment, Addresses, Phone numbers, Other, Social Security numbers, Payment cards |
| Sector | Education · US |
| Status | Confirmed |
| Check your email | Have I Been Pwned |
Sources
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | Oct 31, 2025 | |
| California AGresidents of CA | Dec 1, 2025 | |
| Washington AGresidents of WA | Dec 1, 2025 | 6,413 |
| Delaware DOJresidents of DE | Dec 1, 2025 | 6,894 |
| Vermont AGresidents of VT | Dec 1, 2025 | |
| Indiana AGresidents of IN | Dec 1, 2025 | 2,067 |
| Texas AGresidents of TX | Dec 3, 2025 | 11,455 |
| Oregon DOJresidents of OR | Dec 22, 2025 | 2,722 |
| Have I Been Pwnedaccounts in the data | Feb 16 | 623,750 |
Other breaches at University of Pennsylvania
| Breach | Affected | ||||
|---|---|---|---|---|---|
| Disclosed Apr 9, 2024Apr 9, 20242 years ago | Apr 9, 20242 years ago | Not stated | Education | Confirmed | 388 |
History of this record
- 2026-09-25 · source: empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Report-2025.pdf · backfill source
- 2026-09-25 · source: empty to https://ago.vermont.gov/document/2025-12-01-university-pennsylvania-data-breach-notice-consumers · backfill source
- 2026-09-25 · data_types: ["names","credentials","dob","emails","financial","employment","addresses","phone","other"] to ["names","credentials","dob","emails","financial","employment","addresses","phone","other","ssn","payment-card"] · backfill source
- 2026-09-25 · data_types: ["names","credentials","dob","emails","financial","employment","addresses"] to ["names","credentials","dob","emails","financial","employment","addresses","phone","other"] · seed source
- 2026-09-25 · disclosed: 2025-12-01 to 2025-10-31 · seed source
- 2026-09-25 · summary: In October 2025, the University of Pennsylvania was the victim of a data breach followed by a ransom demand , largely affecting its donor database. After the incident, the attackers sent inflammatory emails to some victims. The data was lat to Hackers used Penn email accounts to send offensive mass emails to alumni and students and claimed to have stolen donor data; Penn later confirmed data was stolen, and in December disclosed a separate breach through Oracle E-Business Suite. · seed source
- 2026-09-25 · title: empty to Hackers breach UPenn systems, send mass emails and steal donor data · seed source
- 2026-09-25 · hibp: empty to UniversityOfPennsylvania · backfill source
- 2026-09-25 · data_types: ["names","credentials"] to ["names","credentials","dob","emails","financial","employment","addresses"] · backfill source
- 2026-09-25 · summary: empty to In October 2025, the University of Pennsylvania was the victim of a data breach followed by a ransom demand , largely affecting its donor database. After the incident, the attackers sent inflammatory emails to some victims. The data was lat · backfill source
- 2026-09-25 · data_types: [] to ["names","credentials"] · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 442500 · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · discovered: empty to 2025-09-29 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.