University of Pennsylvania confirms data stolen in cyberattack

The University of Pennsylvania confirmed a cyberattack on October 30–31 where attackers used social-engineered SSO credentials to access Salesforce, Qlik, SAP and SharePoint, exfiltrating 1.71 GB of internal documents and a Salesforce donor database of approximately 1.2 million records containing PII and financial/donor data; attackers also sent an offensive mass email and claim they may leak records later, and the university is working with the FBI and CrowdStrike.