University of Pennsylvania donor and alumni systems breached via identity impersonation
On October 31, 2025 offensive mass emails were sent to the Penn community from university systems, and Penn said attackers had gained access to a select group of information systems related to development and alumni activities through a sophisticated identity impersonation commonly known as social engineering. Penn later confirmed that files were taken. Reporting said the attackers held an employee's PennKey single sign-on account, which reached the VPN, Salesforce, Qlik, SAP and SharePoint.
- Victim
- University of Pennsylvania
- Industry
- Education
- Country
- United States
- Intrusion began
- Oct 31, 2025
- First disclosed
- Oct 31, 2025
- Actor
- Unattributed
- Initial access
- Credential phishing
- Identity control that failed
- Authentication
- MFA
- Not disclosed
- Abused identity
- Human account
- Records affected
- Not disclosed
- Disclosed cost
- Not disclosed
The identity lesson
One single sign-on account opened many systems at once. Phishing-resistant MFA without exemptions, and step-up checks before access to bulk donor data, would have limited the reach.
Sources
- University of Pennsylvania Confirms Data Breach Following Social Engineering Attack, teiss, Nov 9, 2025
- University of Pennsylvania confirms recent cyberattack led to major data theft, TechRadar, Nov 6, 2025
Record verified Oct 31, 2026 against the sources above. Corrections: contact us.
Related incidents
- Dexcom internal documents accessed after targeted vishing 2026 · Credential phishing
- ASOS customer data reached with an employee login obtained by impersonation 2026 · Credential phishing
- RingCentral customer data stolen after a social engineering attack 2026 · Credential phishing
- Mixpanel smishing breach exposes OpenAI API user data 2025 · Credential phishing
Cite this record
SWI Community Team. (2026). University of Pennsylvania donor and alumni systems breached via identity impersonation. Identity Breach Database, Start with Identity. https://startwithidentity.com/breaches/incidents/2025-upenn-development-systems-social-engineering/
Part of the Identity Breach Database, free to reuse under CC BY 4.0. Analysis across every record: Identity Breach Report 2026.