University of Pennsylvania
Data Breach on February 05, 2026
| Data Breach Report | |||
|---|---|---|---|
| Victim | upenn.edu | ||
| Threat Actor | ShinyHunters | ||
| Date Discovered | Feb 05, 2026 | ||
| Description | University of Pennsylvania is a private Ivy League research university based in the USA (Pennsylvania), offering undergraduate, graduate, and professional degree programs. | ||
| Leak Size | Unknown |
Credential Exposure for upenn.edu
We've indexed 75,152 @upenn.edu accounts from external breaches, plus 14,690 credentials for upenn.edu itself.
Last checked Aug 16, 2026
| @upenn.edu addresses from external breaches | |
|---|---|
| Third-party breaches | 70,926 accounts · across 2139 breaches · 60,812 with a plaintext password · most recent Mar 8, 2026 |
| Combo lists | 27,024 accounts · most recent Aug 15, 2026 |
| Passwords for upenn.edu accounts | |
|---|---|
| Combo lists | 12,967 logins · most recent Aug 15, 2026 |
| Infostealer logs | 3,729 logins · 2,872 infected devices · most recent Aug 8, 2026 |
Logins may belong to customers or to staff, and the data doesn't say which. None of this is necessarily connected to the ransomware attack above.
Is your organization next?
University of Pennsylvania was breached. Check if your company's credentials have been exposed in this or other data breaches.
Check your exposure →Continuous dark web monitoring alerts you when we find leaked credentials or session tokens for your company.