A data breach with the University of Pennsylvania has impacted over 1.2 million individuals’ personal identifiable information, potentially putting these individuals at risk of fraud and suspicious activity. Full names, donor information, and other sensitive data.

University of Pennsylvania Data Breach

Shub Johns & Holbrook LLP is currently investigating University of Pennsylvania (“UPenn”) for an apparent failure to safeguard sensitive consumer information in a data breach that was detected on or around October 31, 2025. University of Pennsylvania, an accredited Philadelphia-based university, discovered that an unauthorized actor gained access to client data within UPenn’s systems.

A purported hacker claimed responsibility for the data breach via an email sent to many students, faculty, alumni and others. UPenn has indicated that approximately 1.2 million individuals have been impacted by the breach. Consumer information exposed in the breach may vary but can include:

• Names
• dates of birth
• addresses
• phone numbers
• estimated net worth
• donation history
• demographic details such as religion, race, and sexual orientation

The cybercriminals responsible for the breach may have already obtained and sold the compromised consumer information. In previous data breaches, victims of data theft have noticed identity theft attempts ranging from fraudulent charges on bank accounts or credit cards, medical and/or government services ordered in their name, or their information being posted on the dark web.

Affected by the UPenn Data Breach

Have you recently received a data breach notification from the University of Pennsylvania or otherwise believe your information has been impacted by the UPenn data breach? If so, we would like to hear from you.  Please complete the contact form on this page or contact us at 610-477-8380 or [email protected].