University of Pennsylvania
What was exposed
Charitable donationsDates of birthEmail addressesGendersIncome levelsJob titlesNamesPhysical addressesReligionsSalutationsSpouses names
What to do if you were affected
- Expect more phishing and spam at this address. Treat messages that reference this company with extra caution.
- Be wary of targeted scams that use your personal details to sound convincing.
Details
In October 2025, the University of Pennsylvania was the victim of a data breach followed by a ransom demand , largely affecting its donor database. After the incident, the attackers sent inflammatory emails to some victims. The data was later published online in February 2026 and included 624k unique email addresses alongside names and physical addresses. For some donor records, additional personal information was exposed, including gender and date of birth. A small subset of records also contained religion, spouse name, estimated income and donation history.
Frequently asked questions
What is the University of Pennsylvania data breach?
In October 2025, the University of Pennsylvania was the victim of a data breach followed by a ransom demand , largely affecting its donor database. After the incident, the attackers sent inflammatory emails to some victims. The data was later published online...
When did the data breach happen?
This data breach occurred around October 2025.
How many accounts were affected?
Around 623,750 accounts were affected.
What information was exposed?
Exposed data included Charitable donations, Dates of birth, Email addresses, Genders, Income levels, Job titles, Names and Physical addresses.
What should I do if I was affected?
Expect more phishing and spam at this address. Treat messages that reference this company with extra caution. Be wary of targeted scams that use your personal details to sound convincing.
Related breaches