Latest / California / December 2025

The University of Pennsylvania

The University of Pennsylvania notified California AG on Dec 1, 2025 of a data breach, which occurred on Aug 11, 2025. Data exposed: Social Security number, Driver's license / state ID, Financial / bank account, Date of birth, Usernames / passwords, Military ID, Phone number, Postal address, Name.

All 3 filings by The University of Pennsylvania, state by state · Case file (dates, days to notice against the statute, what the letter offers, prior incidents)

Organization
The University of Pennsylvania
Source
California AG · source record
Date reported
Dec 1, 2025
Date(s) of breach
Saturday, August 9, 2025Monday, August 11, 2025
Residents affected
Not published by this source
Data exposed
Social Security number Driver's license / state ID Financial / bank account Date of birth Usernames / passwords Military ID Phone number Postal address Name
Notice letter
Sample notice (PDF)
Discovered
Nov 11, 2025, as stated in the letter
"On November 11, 2025, Penn determined that your personal information was among the information obtained from Oracle EBS."
Days to notice
20 days from discovery (Nov 11, 2025) to the California record (Dec 1, 2025). Statute: 30 days from discovery or notification of the breach (Cal. Civ. Code § 1798.82).
Offered in the letter
24 months of credit or identity monitoring through Experian
Third party
The letter attributes the incident to a vendor or service provider
First seen by BreachTally
2026-10-30 15:28 UTC

Dates and counts as filed by the organization with the agency. The breach window and the report date often differ by months.

First seen by BreachTally at 15:28 UTC on Oct 30, 2026. New filings reach paid subscribers within 30 minutes of the agency posting, with the count, the data exposed and the letter. Start a 14-day free trial. We email you two days before the first charge and you cancel in one click.
Not today? Take the free Monday digest: the week's filings by state and the largest by people affected. Once a week.

Other filings by The University of Pennsylvania

OrganizationSourceStateReportedResidents affectedData exposed
University of Pennsylvania Oregon DOJ OR Dec 22, 2025 2,722 Not stated
The University of Pennsylvania Texas AG TX Dec 3, 2025 11,455 Social Security numberFinancial / bank accountPostal addressName

Data reproduced from a public government filing. Spot an error? Email support@breachtally.com with the record link. Corrections are applied and noted.