Where does the University of Pennsylvania case file come from?

Every entry is taken from the breach report University of Pennsylvania lodged with the New Hampshire Attorney General. Nothing here is estimated.

Why do the incident date and the report date differ?

Companies usually investigate before they report. The gap between the two dates shows how long that took.

What does the records-affected figure count?

It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.

Does this case file change over time?

Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Case file

Case File: University of Pennsylvania Data Breach

This file collects the dated facts on record for the University of Pennsylvania incident. The state report is dated December 4, 2025.

Timeline

December 4, 2025Report filed in New HampshireDate the notice was lodged with the New Hampshire Attorney General.

Case facts

Filing state: New Hampshire
Date reported: December 4, 2025
Receiving office: New Hampshire Attorney General

Case notes

The University of Pennsylvania has officially filed notice of a data security incident with regulators in New Hampshire. This filing, submitted on December 4, 2025, indicates that an unauthorized event has potentially compromised personal information. Details regarding the incident's scope and the exact nature of the breach remain under investigation by the university.

According to the public filing, the specific types of personal information involved in this incident have not been detailed. Similarly, the number of individuals potentially affected by this breach has not been specified in the reported information. The investigation status is currently listed as 'investigating,' suggesting that the university is still working to understand the full impact.

Individuals who may have had their personal information involved in this incident should be aware that the university is working to determine precise details. While the exact categories of data remain unconfirmed, it is prudent for anyone associated with the University of Pennsylvania to remain vigilant about their personal accounts and communications.

As a general precaution, consider reviewing statements from financial institutions and any other organizations where you hold accounts for suspicious activity. If you receive official notification from the University of Pennsylvania, review it carefully for guidance. Be cautious of unexpected communications asking for personal details, as these could be phishing attempts.

It is important to rely on direct communications from the University of Pennsylvania for specific information regarding this data incident. Further updates regarding the investigation's findings will likely be shared through official channels as they become available.

Questions about this case file

Where does the University of Pennsylvania case file come from?: Every entry is taken from the breach report University of Pennsylvania lodged with the New Hampshire Attorney General. Nothing here is estimated.
Why do the incident date and the report date differ?: Companies usually investigate before they report. The gap between the two dates shows how long that took.
What does the records-affected figure count?: It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.
Does this case file change over time?: Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

New Hampshire data breaches

Filing source: New Hampshire Attorney General

Named in the University of Pennsylvania breach?

Attach your notice and a short note. An attorney checks it against this case file at no cost.

Timeline

Case facts

Case notes

Questions about this case file

More New Hampshire case files