1
Published signals
currently linked to this company
Company intelligence
Upenn cybersecurity incidents and threat signals
upenn.edu
This company page brings together public reporting currently associated with Upenn. It reflects signals published by Shadow Tier and should not be read as a complete incident history.
Company links
0
Last 28 days
recent published signals
0
Last 90 days
recent published signals
0
High or critical
confidence classifications
June 25, 2026
Latest report
most recent published signal
Company signals
All published signals involving Upenn
University of Pennsylvania Data Breach
The University of Pennsylvania experienced a cyberattack where threat actors breached its systems on October 30, 2025, using a compromised employee PennKey SSO account. The attackers gained access to systems related to the university's development and alumni activities, including Salesforce, Qlik analytics, SAP business intelligence, and SharePoint files. They stole 1.71 GB of internal documents and claimed to have accessed 1.2 million records from the Salesforce donor marketing database, containing PII such as names, birthdates, addresses, phone numbers, and financial information. The breach was discovered on October 31, 2025.
FAQ
Questions about Upenn cybersecurity reporting
What does the Upenn page include?
It combines a reviewed organization profile with all current published Shadow Tier signals explicitly linked to Upenn.
Does every mention of Upenn appear here?
No. A signal must contain a reliable company connection and meet the publication criteria; incidental or ambiguous mentions are excluded.
Why can the incident count change?
The page follows current published reporting. Counts change as new evidence is added, classifications are reviewed, or older signals leave the reporting window.