Skip to content
Cyber Breaches
Search
Data breachResolved

University of Pennsylvania data breach (2025)

In October 2025, the University of Pennsylvania was the victim of a data breach followed by a ransom demand, largely affecting its donor database. After the incident, the attackers sent inflammatory emails to some victims.

Victim
University of Pennsylvania
records
623.8K
SectorEducation

Imported from Have I Been Pwned — pending editorial review and translation to French. The summary below is machine-extracted; consult the source for details.

In 2025-10-30, University of Pennsylvania was affected by a data breach. Approximately 623,750 accounts were exposed. In October 2025, the University of Pennsylvania was the victim of a data breach followed by a ransom demand, largely affecting its donor database. After the incident, the attackers sent inflammatory emails to some victims.

Sources

  1. haveibeenpwned.comhttps://haveibeenpwned.com/PwnedWebsites#UniversityofPennsylvania
  2. upenn.eduhttps://upenn.edu

Related incidents

Data breachContained

Leak at Grenoble School of Management

On 29 December 2025, an actor calling themselves CZX leaked a 1.35 GB database of more than 400,000 Grenoble École de Management students, alumni and prospects on BreachForums, exposing names, contact details and academic records.

Victim
Grenoble School of Management
Data breachOngoing

Data leak at Université de Lille

On 29 December 2025, a record of 7,244 Université de Lille students — reportedly from an IUT Informatique internship database — was posted on BreachForums by an actor using the LAPSUS$ name, exposing names, dates of birth, postal addresses, emails and phone numbers.

Victim
Université de Lille
Records
7.2K