University of Pennsylvania Data Breach
Last Updated on November 5, 2025
At A Glance
- What's Going On?
- Attorneys need to hear from people who may have been affected by the University of Pennsylvania data breach as they investigate whether a class action lawsuit can be filed.
- What You Can Do
- If you're a University of Pennsylvania student, alumnus or donor, fill out the form on this page to learn more about the investigation and how you can help.
- Does This Cost Anything?
- It costs nothing to get in touch or to talk to someone about your rights.
- What Can I Get?
- If filed and successful, a class action lawsuit could provide consumers with money for any harm resulting from the breach.
University of Pennsylvania Data Breach: Lawsuit Investigation
Attorneys working with ClassAction.org are looking into whether a class action lawsuit can be filed in light of the University of Pennsylvania data breach.
As part of their investigation, they need to hear from students, alumni and donors who may have been impacted.
University of Pennsylvania Security Incident: What Happened?
The University of Pennsylvania recently experienced a significant data breach by hackers who claim to have stolen sensitive information on 1.2 million students, alumni and donors. The UPenn data breach first came to light on October 31, 2025, when a hacker reportedly sent offensive emails from Penn.edu addresses to thousands of recipients.
According to a report from BleepingComputer.com, the threat actors alleged that the stolen data includes personal details like names, birth dates, addresses, phone numbers, estimated net worth, donation history and demographic information.
The University of Pennsylvania acknowledged the data breach in a post on its website and in a university-wide email sent on November 4, stating that the infiltrator accessed numerous university systems through a social engineering tactic. According to the post, systems related to Penn's development and alumni activities—including its Salesforce platform, SharePoint and Box file repositories, a reporting application and Marketing Cloud—were accessed through stolen credentials.
Individuals whose personal information was exposed in the University of Pennsylvania data breach should receive direct notice of the incident once Penn has determined exactly what data was impacted.
What You Can Do After the University of Pennsylvania Data Breach
If your information was potentially exposed in the data breach, attorneys want to hear from you. You may be able to start a class action lawsuit to recover compensation for loss of privacy, time spent dealing with the breach, out-of-pocket costs, and more.
A successful case could also force University of Pennsylvania to ensure it takes proper steps to protect the information it was entrusted with.
Student, alumnus or donor of The University of Pennsylvania? Fill out the form on this page today.
Take Action
If you're a student, alumnus or donor who may have been impacted by the University of Pennsylvania data breach, fill out the form on this page to get in touch with us.
An attorney or legal representative may then reach out to you to explain more about this investigation and ask you a few questions.
Remember, there is no cost to get in touch, and you are under no obligation to take action after speaking to someone.
Published: November 5, 2025
Before commenting, please review our comment policy.
The information submitted on this page will be forwarded to Bryson, Harris, Suciu & DeMay, PLLC who has sponsored this investigation.
Featured In:
Who Is ClassAction.org?
ClassAction.org is a group of online professionals who are committed to exposing corporate wrongdoing and giving consumers the tools they need to fight back.
We've been reporting on the legal space for nearly a decade and have built relationships with class action and mass tort attorneys across the country.
