University of Pennsylvania Reports Unspecified Data Breach to OR Regulators
The University of Pennsylvania reported an unspecified data breach to Oregon regulators on December 22, 2025, concerning an incident that occurred in November 2025. The filing indicates an ongoing investigation into the compromise of personal information, prompting individuals to remain vigilant.
- State
- OR
- Breach date
- November 11, 2025
- Reported
- December 22, 2025
The University of Pennsylvania has publicly reported a data breach impacting personal information, according to records filed with Oregon state regulators on December 22, 2025. The incident concerns an unauthorized access event where certain personal information was potentially exposed.
The breach date is listed as November 11, 2025, approximately six weeks prior to the filing. At the time of the report, the university indicated that an investigation into the scope and nature of the incident was still underway, meaning full details were not yet confirmed.
Specific details regarding the types of personal information involved in this breach, as well as the exact number of individuals potentially affected, have not been publicly disclosed in the filing. This information is drawn from public records submitted to state authorities.
Individuals who may be affected by this incident are advised to monitor their accounts and financial statements for any unusual activity. Exercise caution with unsolicited communications, particularly those requesting personal details. Consider reviewing credit reports regularly as a general security measure.
What to do if you were affected
These general steps can help limit the risk of identity theft and fraud after any data breach.
Stay alert to targeted scams
Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.
Keep your notification letter
Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.
Source: OR Attorney General filing
Related data breach cases
- Abbott Cancer Diagnostics
- Aesto LLC
- CareCloud, Inc.
- JRK Property Holdings, Inc.
- CTS Journey Holdings, LLC, a Delaware limited liability company (DBA Corporate Travel Service)
- The Moody Bible Institute of Chicago
- SM Energy Company
- ADT, Inc.
- Bridgeway Benefit Technologies LLC
- YouLend US LLC
- Oaks Park Association
- The Washington Post
- Robinson Nursery, Inc
- Rogue fabrication llc