University of Pennsylvania confirms recent cyberattack led to major data theft

Users display warnings about the use of artificial intelligence (AI), access to malicious software or threats to online hackers. computer cyber security Warning concept or tech scam.

• Hackers accessed University systems via stolen SSO credentials, stealing data on 1.2 million individuals
• Offensive mass email followed partial lockout; University later confirmed the breach was real
• Attack exploited weak MFA enforcement among senior staff through social engineering

It seems the “obviously fake” and “fraudulent” claims recently made by the University of Pennsylvania hackers are not so “obviously fake” and “fraudulent”, after all - as the organization has now confirmed hackers stole files from its systems.