The Trustees of the University of Pennsylvania (UPenn) experienced a data incident in October 2025, which was detected on October 31, 2025. While external reports claim a significant breach affecting approximately 1.2 million individuals, including students, alumni, and donors, UPenn has officially stated that a "limited number" of individuals were notified after a comprehensive review. The university's official communication does not confirm the larger numbers or specific data types alleged in third-party reports. The FBI and forensic teams are reportedly involved in the investigation.
Unverified reports suggest the exposed data may include donor history, donor net worth, demographic information, contact details, and financial data. However, UPenn has not publicly confirmed these specific data types. The actual number of affected individuals remains unclear due to the conflicting reports, with the university only confirming a "limited number." A separate Oracle E-Business Suite breach in August 2025 affected approximately 1,500 Maine residents with names, SSNs, and financial data, but this is a distinct incident from the October 2025 event.
Further details concerning the October 2025 incident, including the full extent of affected data and individuals, may emerge over time, though official public notification letters for this specific event have not been released by the university.