University of Nottingham Confirms Student Records Breach; Have I Been Pwned Says 454,600 Affected
Summary
The University of Nottingham confirmed data in its student records system was accessed. ShinyHunters claimed responsibility and alleged it stole over 40GB; Have I Been Pwned said analysis of leaked data indicated 454,600 current and former students were affected.
Key points
- The university confirmed that a cyber incident exposed a significant amount of data in its student records system and said it reported the incident to the UK Information Commissioner’s Office and Action Fraud.
- ShinyHunters claimed responsibility and alleged it stole over 40GB of documents from Nottingham and its Malaysia and China campuses.
- The university has not attributed the attack; ShinyHunters shared an archive it described as stolen documents.
- Have I Been Pwned said its analysis indicated 454,600 current and former students were affected, with data including contact, personal, and academic information.
- BleepingComputer reported the incident as part of a wider ShinyHunters campaign targeting more than 100 organizations’ Oracle PeopleSoft instances; the group claimed to use a chain of zero-days and older vulnerabilities.
Article Details
- Victim Organization
- University of Nottingham
- Incident Type
- Cyber incident involving unauthorized access to the student records system and exposure of data; ShinyHunters claimed data theft.
- Data Types Exposed
- Personal information, including names, home addresses, phone numbers, email addresses, dates of birth, ethnicities, disabilities, and passport numbers
- Financial and payment information, including student finance, billing, fee payment, and credit card details
- Academic enrollment information
- Campus portal exports
- Affected Records
- 454,600 current and former students, according to Have I Been Pwned.
- Affected Data Size
- More than 40GB, claimed by ShinyHunters.
- Operational Impact
- The student records system was accessed and a significant amount of data was exposed. No service disruption was reported.
- Ransom Or Extortion
- ShinyHunters claimed responsibility and posted allegedly stolen documents on its dark web leak site. No ransom demand or payment was reported.
- Claim Status
- confirmed
Threat Actors
Vendors
Products
Countries
ChinaShinyHunters claimed responsibility and said it stole more than 40GB of data, including personal, financial, and campus portal information from Nottingham and its Malaysia and China campuses.MalaysiaShinyHunters claimed responsibility and said it stole more than 40GB of data, including personal, financial, and campus portal information from Nottingham and its Malaysia and China campuses.United KingdomNottingham University is a public research university with 7,000 staff and over 46,000 students, ranking in the Top 20 in the United Kingdom and the Top 100 worldwide.