UPenn was subject to a data breach affecting 1.2 million records, according to the hackers who claimed responsibility.