Skip to content

University of Pennsylvania

2 breaches443K affected in allEducationupenn.edu

BreachAffected
Hackers breach UPenn systems, send mass emails and steal donor dataOct 31, 202510 months agoHacking443K
Disclosed Apr 9, 2024Apr 9, 20242 years ago388
About

Every breach here links to its sources and official notices. Across fru.dev: lawsuits, incidents and outages.

  • 2026-09-25 · University of Pennsylvania, 2024-04-09 · added
  • 2026-09-25 · University of Pennsylvania, 2025-10-31 · source: https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Report-2025.pdf
  • 2026-09-25 · University of Pennsylvania, 2025-10-31 · source: https://ago.vermont.gov/document/2025-12-01-university-pennsylvania-data-breach-notice-consumers
  • 2026-09-25 · University of Pennsylvania, 2025-10-31 · data_types: ["names","credentials","dob","emails","financial","employment","addresses","phone","other","ssn","payment-card"]
  • 2026-09-25 · University of Pennsylvania, 2025-10-31 · data_types: ["names","credentials","dob","emails","financial","employment","addresses","phone","other"]
  • 2026-09-25 · University of Pennsylvania, 2025-10-31 · disclosed: 2025-10-31
  • 2026-09-25 · University of Pennsylvania, 2025-10-31 · summary: Hackers used Penn email accounts to send offensive mass emails to alumni and students and claimed to have stolen donor data; Penn later confirmed data was stolen, and in December disclosed a separate breach through Oracle E-Business Suite.
  • 2026-09-25 · University of Pennsylvania, 2025-10-31 · title: Hackers breach UPenn systems, send mass emails and steal donor data
  • 2026-09-25 · University of Pennsylvania, 2025-10-31 · hibp: UniversityOfPennsylvania
  • 2026-09-25 · University of Pennsylvania, 2025-10-31 · data_types: ["names","credentials","dob","emails","financial","employment","addresses"]
  • 2026-09-25 · University of Pennsylvania, 2025-10-31 · summary: In October 2025, the University of Pennsylvania was the victim of a data breach followed by a ransom demand , largely affecting its donor database. After the incident, the attackers sent inflammatory emails to some victims. The data was lat
  • 2026-09-25 · University of Pennsylvania · domain: upenn.edu
  • 2026-09-25 · University of Pennsylvania, 2025-10-31 · data_types: ["names","credentials"]
  • 2026-09-25 · University of Pennsylvania, 2025-10-31 · records_basis: organization
  • 2026-09-25 · University of Pennsylvania, 2025-10-31 · records: 442500
  • 2026-09-25 · University of Pennsylvania, 2025-10-31 · attack: hacking
  • 2026-09-25 · University of Pennsylvania, 2025-10-31 · discovered: 2025-09-29
  • 2026-09-25 · University of Pennsylvania, 2025-10-31 · added
  • 2026-09-25 · University of Pennsylvania · added

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.