University of Nottingham Confirms Breach After Hackers Leak Data
ShinyHunters leaked over 450,000 email addresses from the University of Nottingham, which confirmed the breach.
The University of Nottingham has confirmed a data breach after the ShinyHunters hacker group leaked over 450,000 email addresses and other personal information online. The attackers gained access to university systems and exfiltrated the data, which was subsequently posted on a hacking forum. The breach exposes a large volume of personal information from students, staff, and affiliates.
The ShinyHunters group, known for targeting organizations worldwide, took credit for the attack. The leaked data includes email addresses, names, and potentially other sensitive details. The university has not yet disclosed the exact scope of the compromised information but is working with law enforcement and cybersecurity experts to investigate the incident.
The University of Nottingham is a major UK institution with over 45,000 students and 7,000 staff. The breach could have significant implications for those affected, including potential phishing attacks and identity theft. The university has advised individuals to be vigilant and monitor their accounts for suspicious activity.
This incident adds to a growing list of breaches targeting educational institutions. Universities often hold vast amounts of personal and research data, making them attractive targets for cybercriminals. The ShinyHunters group has been particularly active in recent months, also claiming breaches of Oracle PeopleSoft servers and other organizations.
The university has not yet released details on how the attackers gained access or whether any financial data was compromised. They are expected to provide updates as the investigation progresses. In the meantime, affected individuals are urged to change passwords and enable multi-factor authentication where possible.
This breach highlights the ongoing threat to educational institutions and the need for robust cybersecurity measures. As attackers become more sophisticated, universities must invest in security to protect sensitive data and maintain trust.
The University of Nottingham has now confirmed the incident, stating that a 'significant amount' of data affecting current and former students was accessed, and it has directly contacted those impacted, including at its campuses in Malaysia and China. The ShinyHunters group claims to have stolen over 40GB of material, including credit card details, while HaveIBeenPwned analysis of partially published data reveals approximately 455,000 unique email addresses alongside extensive personal information such as passport numbers, ethnicities, and disability data. The university is working with a third-party forensic firm to verify the exact scope of the breach, noting that ShinyHunters has a history of misrepresenting access in extortion attempts.