Princeton University discloses data breach affecting donors, alumni

Princeton University confirmed a November 10 data breach in which a phishing attack on an employee exposed biographical information (names, emails, phone numbers, home/business addresses) from a fundraising/alumni database; the university says no financial data, passwords, or Social Security numbers were present. The report also describes a related UPenn incident where a stolen SSO account allowed exfiltration of internal documents and a 1.2M-record donor database; Princeton currently has no factual evidence linking the two breaches.