University of Pennsylvania confirms hacker stole data during cyberattack | TechCrunch

""We got hacked," the message from the hackers read."

""We love breaking federal laws like FERPA (all your data will be leaked)," the message added."

""On October 31, Penn discovered that a select group of information systems related to Penn's development and alumni activities had been compromised,""

""Penn's staff rapidly locked down the systems and prevented further unauthorized access; however, not before an offensive and fraudulent email was sent to our community and information was taken by the attacker.""

On October 31, Penn discovered that a select group of information systems related to development and alumni activities had been compromised. Staff rapidly locked down those systems and prevented further unauthorized access, but an offensive and fraudulent email was sent to the community and information was taken by the attacker. The attacker sent messages claiming "We got hacked," threatening to leak FERPA-protected data and urging donors to stop giving money. The breach resulted from a social engineering attack. The university requires multi-factor authentication for accounts, but some high-ranking officials reportedly had MFA exemptions. An alumna and former employee received the fraudulent emails from official @upenn.edu addresses.

Read at TechCrunch