What is the official website of University of Pennsylvania ?

The official website of University of Pennsylvania is http://www.upenn.edu/.

What is University of Pennsylvania's cybersecurity risk score?

University of Pennsylvania has an AI-generated cybersecurity risk score of 684 out of 1000, indicating a Weak security posture according to Rankiteo's assessment.

How many security incidents has University of Pennsylvania experienced?

According to Rankiteo, University of Pennsylvania currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has University of Pennsylvania been affected by any supply chain cyber incidents ?

According to Rankiteo, University of Pennsylvania has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does University of Pennsylvania have SOC 2 Type 1 certification ?

According to Rankiteo, University of Pennsylvania is not certified under SOC 2 Type 1.

Does University of Pennsylvania have SOC 2 Type 2 certification ?

According to Rankiteo, University of Pennsylvania does not hold a SOC 2 Type 2 certification.

Does University of Pennsylvania comply with GDPR ?

According to Rankiteo, University of Pennsylvania is not listed as GDPR compliant.

Does University of Pennsylvania have PCI DSS certification ?

According to Rankiteo, University of Pennsylvania does not currently maintain PCI DSS compliance.

Does University of Pennsylvania comply with HIPAA ?

According to Rankiteo, University of Pennsylvania is not compliant with HIPAA regulations.

Does University of Pennsylvania have ISO 27001 certification ?

According to Rankiteo,University of Pennsylvania is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does University of Pennsylvania operate in ?

University of Pennsylvania operates primarily in the Higher Education industry.

How many employees does University of Pennsylvania have ?

University of Pennsylvania employs approximately 22,599 people worldwide.

Does University of Pennsylvania own any subsidiaries ?

University of Pennsylvania presently has no subsidiaries across any sectors.

How many LinkedIn followers does University of Pennsylvania have ?

University of Pennsylvania's official LinkedIn profile has approximately 579,397 followers.

What is the NAICS classification code for University of Pennsylvania ?

University of Pennsylvania is classified under the NAICS code 6113, which corresponds to Colleges, Universities, and Professional Schools.

Does University of Pennsylvania have a Crunchbase profile ?

No, University of Pennsylvania does not have a profile on Crunchbase.

Does University of Pennsylvania have a LinkedIn profile ?

Yes, University of Pennsylvania maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/university-of-pennsylvania.

How many cybersecurity incidents has University of Pennsylvania experienced ?

As of July 16, 2026, Rankiteo reports that University of Pennsylvania has experienced 7 cybersecurity incidents.

How many peer or competitor companies does University of Pennsylvania have ?

University of Pennsylvania has an estimated 17,217 peer or competitor companies worldwide.

What types of cybersecurity incidents has University of Pennsylvania faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Boost Score +25 with badge (5 left)

684

/1000

Weak

709

/1000

Moderate

University of Pennsylvania Vendor Cyber Rating & Cyber Score

upenn.edu

Add Your Compliance Badge

The University of Pennsylvania is one of the oldest universities in America and, as a member of the Ivy League, one of the most prestigious institutions of higher learning in all the world. Penn is home to 12 schools including the School of Arts and Sciences, the School of Nursing, the School of Engineering and Applied Science and the Wharton School of Business, as well as several graduate and professional schools such as the Perelman School of Medicine.

UP A.I CyberSecurity Scoring

Scoring History

University of Pennsylvania CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

University of Penns...

Breach

11/2025

PEN323253211062...

University of Penns...

Breach

10/2025

PEN409244011052...

University of Penns...

Breach

8/2025

UNI1764684299

University of Penns...

Breach

5/2025

PEN086240811072...

University of Penns...

Breach

5/2025

UNI169281611042...

University of Penns...

Breach

11/2024

PEN196201911052...

University of Penns...

Breach

10/2023

PEN339463311042...

Loading…

A.I.

UP Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for UP

Incidents vs Higher Education Industry Avg (This Year)

No incidents recorded for University of Pennsylvania in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for University of Pennsylvania in 2026.

Incident Types UP vs Higher Education Industry Avg (This Year)

No incidents recorded for University of Pennsylvania in 2026.

Incident History - UP (X = Date, Y = Severity)

Loading…

SUBSIDIARY

University of Pennsylvania Subsidiaries

UP

Higher Education

Website: http://www.upenn.edu/

Company Size: 10,000+ employees

Vagelos Institute for Energy Science and TechnologyHigher Education

Penn Dental MedicineHigher Education

University of Pennsylvania School of Veterinary MedicineHigher Education

Penn Institute for Urban ResearchHigher Education

Penn Information Systems & ComputingIT Services and IT Consulting

Penn AIHigher Education

The Huntsman Program in International Studies and BusinessHigher Education

Kleinman Center for Energy PolicyHigher Education

Penn Arts & SciencesHigher Education

Pennovation WorksFacilities Services

Penn Alliance for Higher Education and Democracy (AHEAD)Education Administration Programs

Loading…

University of Pennsylvania Similar Companies

National University of Singapore

nus.edu.sg

At NUS, we are shaping the future through our people and our pursuit of new frontiers in knowledge. In a single century, we have become a university of global influence and an Asian thought leader. Our location at the crossroads of Asia informs our mission and gives us a tremendous vantage point to help create opportunities and address the pressing issues facing Singapore, Asia and the world. At NUS, we believe in education, research and service that change lives. Read our social media community guidelines here: https://nus.edu/socialmediaguidelines.

USP - Universidade de São Paulo

usp.br

A Universidade de São Paulo (USP) é uma universidade pública, mantida pelo Estado de São Paulo e ligada à Secretaria de Desenvolvimento Econômico, Ciência, Tecnologia e Inovação (SDECTI). O talento e dedicação dos docentes, alunos e funcionários têm sido reconhecidos por diferentes rankings mundiais, criados para medir a qualidade das universidades a partir de diversos critérios, principalmente os relacionados à produtividade científica.

University of Florida

UF.edu

University of Florida is a major, public, comprehensive, land-grant, research university. The state's oldest, largest and most comprehensive university, it is among the nation's most academically diverse public universities. University of Florida has a long history of established programs in international education, research and service. It was founded in 1853 and is based in Gainesville, Florida.

University of California

universityofcalifornia.edu

No other university does as much for so many as the University of California. For almost 150 years, the University of California has educated the brightest minds and helped California become a beacon of innovation. Our campuses routinely are ranked among the best in the world. But our reach extends beyond campus borders. Our people connect the dots, exchange ideas, make advancements and unlock the secrets and mysteries of the universe every day. They engage local governments and underserved schools, save lives and improve health, protect the environment and push the boundaries of space. And it adds up to an immense direct impact on the economy. UC supports 430,000 jobs and contributes over $46 billion to the California economy each year.

Newcastle University

ac.uk

Newcastle University is a Russell Group university in the North East of England with a thriving international community of some 27,750 students from over 130 countries worldwide. As a member of the Russell Group of research intensive universities we have a world-class reputation for research excellence in the fields of medicine, science and engineering, social sciences and the humanities. Our academics are sharply focused on responding to the major challenges facing society today. Our research and teaching are world-leading in areas as diverse as health, culture, technology and the environment. We are committed to providing our students with excellent, research-led teaching delivered by dedicated and passionate teachers. Newcastle is among the top 20 universities in the country for our employment rate with 95% of our graduates going on to employment or further study, more than three quarters in graduate-level jobs. We are also one of the top 20 universities targeted by graduate employers in the UK.

University of Helsinki

helsinki.fi

Working for the world Science has the power to change the world. Join one of the best research universities in the world – an international community united through bold thinking, science, research, and learning, with over 30,000 students and 8,000 employees. We are defined by our multidisciplinary approach. This, combined with a dedication for cross-border collaboration, gives us our potential to find real solutions and build hope for a better, more sustainable future. We are united by our values – truth, bildung, freedom, and inclusivity – as well as our passion for work that truly matters. Join us: work for the future – work for the world. Read more at www.helsinki.fi

Northeastern University

northeastern.edu

Founded in 1898, Northeastern is a global research university with a distinctive, experience-driven approach to education and discovery. The university is a leader in experiential learning, powered by the world’s most far-reaching cooperative education program. We integrate classroom study with opportunities for professional work, research, service, and global learning in more than 100 countries. The same spirit of collaboration guides a use-inspired research enterprise focused on solving global challenges in health, security, and sustainability. Northeastern offers a comprehensive array of undergraduate and graduate programs leading to degrees through the doctorate in nine colleges and schools, and select graduate programs at campuses in Boston, Charlotte, N.C., San Francisco Bay Area, Seattle, and Toronto. Campuses in Burlington, MA, and Nahant, MA, are home to research institutes for homeland security and coastal sustainability, respectively.

University of Tehran

ac.ir

University of Tehran, an iconic institution of higher education in Iran, traces its origins back seven centuries to its foundation as a houza (traditional religious school). Over time, it evolved from this religious structure into a modern academic institution. About a century ago, the Dar-ol-Fonoon College became the first engineering school in its modern form, marking a significant step in Iran's higher education landscape. The University of Tehran, as it is known today, was officially inaugurated in the winter of 1934. Currently, the University of Tehran offers 976 programs across 500 fields within 39 faculties and 120 departments located on campuses in Tehran, Qom, Karaj, Kish, and Jolfa. The university is supported by a distinguished faculty of over 2,000 tenured members. Approximately 15% of Iran’s Centers of Excellence, as recognized by the Ministry of Science, Research, and Technology, are affiliated with the University of Tehran. UT’s dedication to research is reflected in its more than 40 research centers, 3,500 laboratories, and its leading press, which publishes over 50 peer-reviewed scientific journals. For more details on the University of Tehran’s colleges and faculties, please visit: https://ut.ac.ir/en/page/9786/colleges-faculties-international-campuses

UNSW

unsw.edu.au

The University of New South Wales (UNSW) is one of Australia's leading research and teaching universities. Established in 1949, UNSW has expanded rapidly and now has more than 52,000 students, including more than 14,000 international students from over 130 different countries. UNSW offers more than 300 undergraduate and 600 postgraduate programs, and has developed an extensive network of alumni chapters throughout Asia. UNSW is a founding member of the prestigious Group of Eight research intensive universities in Australia and a member of the Universitas 21 international consortium. The main UNSW campus is located on a 38-hectare site at Kensington, in Sydney. Other campuses are UNSW Art and Design (Paddington), UNSW Canberra (Canberra City and Australian Defence Force Academy), and sub-campuses at Randwick and Coogee, as well as research stations around NSW. We believe in academic freedom, so posts do not necessarily represent official UNSW views. Read our Social Media Terms of Service at www.unsw.to/sm UNSW Sydney CRICOS no.00098G facebook.com/unsw twitter.com/unsw instagram.com/unsw youtube.com/unsw

Loading…

NEWS

University of Pennsylvania CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

February 10, 2026 08:00 AM

Penn data leaked after University refused to pay $1 million ransom, hacker group says

After the ransom went unpaid, the hackers surfaced online to take credit for the attack and set the record straight.

Read Article

February 09, 2026 08:00 AM

Michael Hicks on Building Safer Software and a Better Practices in Cybersecurity

In the News / February 9, 2026. Share: Author: Melissa Pappas. When Michael Hicks, the Cecilia Fitler Moore Professor in Computer and Information Science,...

Read Article

February 08, 2026 08:00 AM

Hackers Leak Over Two Million Records After Harvard, UPenn Refuse Ransom

Hackers leak over two million records after Harvard and UPenn refuse ransom, escalating phishing-led breaches into a major alumni data...

Read Article

February 05, 2026 08:00 AM

New files leaked in data breach show how Penn tracked years of donor activity

A cache of confidential University files released by the cybercrime group ShinyHunters appears to contain never-before-seen donor records...

Read Article

February 05, 2026 08:00 AM

Personal data stolen during Harvard and UPenn data breaches leaked online

ShinyHunters leaked over one million records stolen from Harvard and UPenn onto their dark web site; Data includes personal details,...

Read Article

February 05, 2026 08:00 AM

Hackers dump millions of stolen records in Harvard and UPenn data incidents

Extortion group ShinyHunters publicly dumped over two million records allegedly stolen from Harvard University and the University of...

Read Article

February 04, 2026 08:00 AM

Cybercrime group claims responsibility for Penn email hack, leaks additional internal files

Cybercrime group ShinyHunters appears to have taken responsibility for the October 2025 data breach at Penn's Graduate School of Education...

Read Article

February 04, 2026 08:00 AM

Hackers publish personal information stolen during Harvard, UPenn data breaches

The prolific cybercrime group ShinyHunters took responsibility for hacking Harvard and the University of Pennsylvania, and published the...

Read Article

February 02, 2026 08:00 AM

Penn Engineering Launches New Master’s Program in Software Systems and Cybersecurity

Academics, In the News, Students / February 2, 2026. Share: Author: Ian Scheffler. The University of Pennsylvania School of Engineering and Applied Science...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-63175

SUMMARY

PlaywrightCapture stored capture-specific configuration and runtime data as mutable class-level variables rather than instance-level variables. Consequently, multiple Capture objects running within the same Python process could share state, including HTTP headers, cookies, browser storage, HTTP credentials, proxy configuration, user-agent settings, geolocation information, and captured request data. In a multi-user or concurrent deployment, information supplied during one capture could therefore persist and be reused by a subsequent or parallel capture. This could result in the disclosure of authentication cookies, credentials, browser storage, or captured request data belonging to another user. It could also cause requests to be performed with another capture's authentication context, headers, or proxy configuration, potentially enabling unauthorized access to remote resources or interference with other capture operations. The vulnerability is resolved by initializing all capture-specific settings and request data as instance variables in the Capture constructor, ensuring that state is isolated between capture operations.

Published

Date2026-07-15

Updated

Date2026-07-15

RISK INFORMATION (Score: )

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/Lookyloo/PlaywrightCapture/commit/1e354b9d8566f49dbb331410be24c7c295645d43

CVE-2026-62314

SUMMARY

Anubis is a Web AI Firewall Utility that challenges users' connections in order to protect upstream resources from scraper bots. From 1.22.0 until 1.26.0-pre1, lib/policy/checker.go PathChecker.Check() trusted the client-controlled X-Original-URI header before matching r.URL.Path, allowing an HTTP client to match default data/common/keep-internet-working.yaml ALLOW rules such as ^/\.well-known/.*$ and bypass the Anubis challenge. This issue is fixed in version 1.26.0-pre1.

Published

Date2026-07-15

Updated

Date2026-07-15

RISK INFORMATION (Score: 5.8)

cvss3

Base Score: 5.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

Impact Score

1.4

Exploitability

3.9

REFERENCES

CVE-2026-55652

SUMMARY

Wekan is open source kanban built with Meteor. Prior to 9.46, header-login with HEADER_LOGIN_TRUSTED_IPS uses getRequestIp() in server/lib/headerLoginAuth.js to trust the client-supplied X-Forwarded-For header before the real socket address, allowing an unauthenticated attacker to send HEADER_LOGIN_ID for any username and receive a meteor_login_token session, including for admin. This issue is fixed in version 9.46.

Published

Date2026-07-15

Updated

Date2026-07-15

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-55576

SUMMARY

MaaAssistantArknights is a one-click tool for daily Arknights tasks. In the current dev-v2 workflow, .github/workflows/release-preparation.yml inlined attacker-controlled github.event.pull_request.title into a run: shell command during the pull_request opened, reopened, and ready_for_review events, so a non-draft fork PR whose title starts with Release v could execute shell commands on the ubuntu-latest runner during the generate-changelog job. This vulnerability is fixed by commit cafc3946059e6337d2089d4fec8b6885ba17c332.

Published

Date2026-07-15

Updated

Date2026-07-15

RISK INFORMATION (Score: )

cvss4

Base Score: 8.8

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55445

SUMMARY

Qinglong is a timed task management platform supporting Python3, JavaScript, Shell, and Typescript. Prior to 2.20.1, the init guard middleware in back/loaders/express.ts checks /api/user/init but not /open/user/init, while rewrite('/open/*', '/api/$1') rewrites the whitelisted /open/* path after JWT authentication and the guard have passed; an unauthenticated attacker can send PUT /open/user/init to reset administrator credentials on an initialized instance. This issue is fixed in 2.20.1.

Published

Date2026-07-15

Updated

Date2026-07-15

RISK INFORMATION (Score: )

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…