PHILADELPHIA — A group of alumni from the University of Pennsylvania has taken legal action against the university following a significant cybersecurity breach. The lawsuits, filed in federal court, accuse the institution of negligence in safeguarding personal data after a cyber-attack targeted alumni and donor systems.
The breach, discovered on October 31, led to at least three lawsuits. Hackers reportedly accessed systems connected to the university’s alumni and development records, even sending offensive emails during the attack.
On November 4, the university acknowledged the breach, confirming that specific information systems related to its development and alumni activities had been compromised. The institution has involved the FBI and hired cybersecurity experts to conduct a thorough investigation.
Although the university claims that all systems have been restored and the breach is “contained,” it has not disclosed the number of individuals affected or the exact nature of the data compromised. Some reports suggest that up to 1.2 million individuals’ data might have been exposed.
This incident highlights the increasing vulnerabilities faced by higher education institutions, which manage large amounts of sensitive data related to donors, alumni, and students. The lawsuits emphasize the potential long-term risks for those impacted, including identity theft, fraud, and privacy violations.
Should the lawsuits succeed, the university could face significant legal and reputational repercussions. This situation underscores the critical need for strong cybersecurity measures in academic environments, as these institutions increasingly handle extensive personal and financial information.
