Penn is investigating a new data breach affecting company software and personal data

Penn is investigating a cybersecurity breach on its Oracle E-Business Suite servers that compromised the personal information of university employees in multiple states.

The breach discovered by the university in November exploited the corporate software that Penn uses to manage internal operations, according to letters filed with attorneys general in several states. Penn is in the process of notifying people whose personal information was compromised as a result of the incident, according to a university spokesperson.

“The University of Pennsylvania was one of nearly 100 previously identified organizations simultaneously affected by the widespread Oracle E-Business Suite incident, which involved a previously unknown vulnerability in the Oracle system,” the spokesperson wrote in a statement to The Daily Pennsylvanian.

Penn has “implemented the patches that Oracle issued to fix this….”