University of Pennsylvania and University of Phoenix disclose data breaches

The University of Pennsylvania and the University of Phoenix confirmed they were impacted by an active hacking campaign exploiting a critical Oracle E-Business Suite vulnerability that allowed unauthorized access and data exfiltration from their EBS environments; the University of Phoenix reported that names, contact information, dates of birth, social security numbers, and bank account/routing numbers were among the data accessed, and multiple other universities have been affected as part of the same campaign.