University of Pennsylvania Reports Data Security Incident to Washington AG

On April 15, 2026, The Trustees of the University of Pennsylvania filed a data breach notification with the Washington Attorney General. This official filing confirms that unauthorized access to the university's systems took place. While the exact date of the security incident remains unknown, an investigation into the matter is currently in progress.

The specific categories of personal information affected by this incident were not detailed in the public filing. However, if you received a direct notification letter from the University of Pennsylvania, it signifies that your data was likely among the information accessed without authorization. The university's notification should provide more precise details about what information of yours may have been involved.

Receiving a formal data breach notification letter means that the University of Pennsylvania identified your personal information within the affected systems. This letter serves as direct communication to inform you of the incident and any recommended steps. It is important to carefully read this notification.

To help protect yourself, consider monitoring your accounts for any unusual activity. Reviewing statements and reports can help you spot potential misuse of your information. You may also want to be cautious of unsolicited communications that ask for personal details.

Remaining vigilant against phishing attempts and unexpected requests for your personal data is a general best practice following any security incident. Official communications from the University of Pennsylvania will provide verified information and guidance.