University of Pennsylvania data breach

Clerk's notes

On December 22, 2025, the University of Pennsylvania filed a data security incident report with Oregon authorities. The report indicates that unauthorized access to their systems was identified on November 11, 2025, and the incident is currently under investigation by the university.

This filing confirms that a data breach occurred. If you have received an official notification letter from the University of Pennsylvania, it signifies that your personal information was likely part of the data exposed during this unauthorized access incident. The university maintains extensive records, and such breaches can affect a wide range of individuals.

While the specific nature of the information involved has not been detailed, it is prudent for any affected individual to take protective measures. Regularly review financial statements and credit reports for any suspicious activity. Consider changing passwords for online accounts, especially those associated with the university, and remain vigilant against phishing attempts or unexpected communications seeking personal details.

Navigating the aftermath of a data breach can be complex. Understanding what steps to take and your rights as an affected party is important. If you received a data breach notification letter from the University of Pennsylvania, you may be eligible for a free case review to explore potential options and next steps.

If a notification letter about this breach reached you, see every Oregon data breach on file or browse all cases.