University of Pennsylvania

2 breaches443K affected in allEducationupenn.edu

Hackers breach UPenn systems, send mass emails and steal donor dataHacking exposed names, credentials and tokens, dates of birth, emails, financial details, employment records, addresses, phone numbers, Social Security numbers and payment cards. Reported to the California AG.Hacking443K affectedEducationUSOct 31, 2025 Breach, details not statedBreach notice filed with the Indiana AG, details not stated.388 affectedEducationUSApr 9, 2024

About

Every breach here links to its sources and official notices. Across Glyph: lawsuits, incidents and outages.

Added2026-09-25

University of Pennsylvania, 2024-04-09

source2026-09-25

University of Pennsylvania, 2025-10-31https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Report-2025.pdf

source2026-09-25

University of Pennsylvania, 2025-10-31https://ago.vermont.gov/document/2025-12-01-university-pennsylvania-data-breach-notice-consumers

data_types2026-09-25

University of Pennsylvania, 2025-10-31["names","credentials","dob","emails","financial","employment","addresses","phone","other","ssn","payment-card"]

data_types2026-09-25

University of Pennsylvania, 2025-10-31["names","credentials","dob","emails","financial","employment","addresses","phone","other"]

disclosed2026-09-25

University of Pennsylvania, 2025-10-312025-10-31

summary2026-09-25

University of Pennsylvania, 2025-10-31Hackers used Penn email accounts to send offensive mass emails to alumni and students and claimed to have stolen donor data; Penn later confirmed data was stolen, and in December disclosed a separate breach through Oracle E-Business Suite.

title2026-09-25

University of Pennsylvania, 2025-10-31Hackers breach UPenn systems, send mass emails and steal donor data

hibp2026-09-25

University of Pennsylvania, 2025-10-31UniversityOfPennsylvania

data_types2026-09-25

University of Pennsylvania, 2025-10-31["names","credentials","dob","emails","financial","employment","addresses"]

summary2026-09-25

University of Pennsylvania, 2025-10-31In October 2025, the University of Pennsylvania was the victim of a data breach followed by a ransom demand , largely affecting its donor database. After the incident, the attackers sent inflammatory emails to some victims. The data was lat

domain2026-09-25

University of Pennsylvaniaupenn.edu

data_types2026-09-25

University of Pennsylvania, 2025-10-31["names","credentials"]

records_basis2026-09-25

University of Pennsylvania, 2025-10-31organization

records2026-09-25

University of Pennsylvania, 2025-10-31442500

attack2026-09-25

University of Pennsylvania, 2025-10-31hacking

discovered2026-09-25

University of Pennsylvania, 2025-10-312025-09-29

Added2026-09-25

University of Pennsylvania, 2025-10-31

Added2026-09-25

University of Pennsylvania