University of Pennsylvania confirms new data breach after Oracle hack

The University of Pennsylvania disclosed a data breach in which attackers exploited a previously unknown zero-day in Oracle E-Business Suite to exfiltrate files containing personal information; the incident is part of a widespread extortion campaign tied to the Clop ransomware group (CVE-2025-61882) that has affected nearly 100 organizations since August 2025 and resulted in data theft and public leaks.