UniversityofCalifornia

universityofcalifornia.edu

503,270
Exposed Records
Dec 2020
Breach Date
5 years ago
Unknown
Password Risk
Education industry
Education
Industry
Added to XposedOrNot on September 9, 2025 · #503 of 763 breaches by records exposed

About This Breach

The University of California Data Breach in December 2020 occurred due to a vulnerability in third-party provider Accellion. The incident exposed data on both students and staff, including 503K unique email addresses, along with names, dates of birth, genders, social security numbers, ethnicities, and various academic-related attributes.

Data Exposed

Email addresses
Names
Dates of birth
Phone numbers
Genders
Physical addresses
Social security numbers

Breach Details

Breach Type Data Breach
Searchable Yes
Verified Yes
Sensitive Data No
Reference No reference available

Frequently Asked Questions

When did the UniversityofCalifornia data breach happen?

UniversityofCalifornia was breached in Dec 2020. The breach was added to the XposedOrNot index on September 9, 2025.

How many records were exposed in the UniversityofCalifornia breach?

503,270 records were exposed, making it the #503 largest of the 763 breaches in our index.

What data was exposed in the UniversityofCalifornia breach?

The exposed data includes: Email addresses, Names, Dates of birth, Phone numbers, Genders, Physical addresses, Social security numbers.

What should I do if I was affected by the UniversityofCalifornia breach?

Change your password on the affected service (and anywhere you reused it), turn on two-factor authentication, and set up free breach alerts on XposedOrNot so you know the moment your email appears in a new breach.

What Should You Do?

High Priority

Enable Two-Factor Authentication

Add 2FA on all supported accounts using an authenticator app like Google Authenticator or Authy.

Urgent

Place a Fraud Alert

Contact credit bureaus to place a fraud alert or credit freeze to prevent identity theft.

Recommended

Watch for Phishing Calls & SMS

Be cautious of unexpected calls or texts asking for personal information.

Recommended

Beware of Scam Mail

Be skeptical of unexpected correspondence requesting personal details.

Recommended

Monitor Your Accounts

Set up login alerts and review account activity regularly for suspicious access.