The University of Nottingham says hackers stole a significant amount of data from its student record system, affecting current students and alumni. SecurityWeek reports ShinyHunters claimed responsibility and published stolen files; Have I Been Pwned found about 455,000 unique email addresses in the leak along with names, usernames, addresses, phone numbers, passport numbers, gender, ethnicity, disability information, citizenship status, academic enrollment details, and fee-payment data.
Why it matters: This exposure includes highly sensitive identity and education records that could fuel phishing, fraud, and identity theft against students and graduates. Affected people should watch for targeted messages, reset reused passwords, and monitor accounts and identity documents, while universities should review access to student-record systems and breach-notification steps.
2026.06.15
63% relevant
The article connects the Nottingham breach to the same underlying Oracle PeopleSoft exploitation campaign by ShinyHunters, clarifying that Nottingham was one of the 100+ victims hit via CVE-2026-35273.
2026.06.11
98% relevant
This source directly updates the same incident with the university's confirmation that a significant amount of data was accessed, adds suspected categories of exposed information, and cites Have I Been Pwned analysis indicating about 455,000 unique email addresses and extensive personal data in the leaked sample.
Eduard Kovacs
2026.06.11
100% relevant
This article establishes a distinct breach event: the university itself confirms unauthorized access to its student record system after ShinyHunters leaked stolen data, with scope and affected data types now concretely described.
← Back to all stories