APUC Confirms Attackers Accessed Historical Data
Summary
Scotland's APUC says attackers accessed historical data in a mid-July intrusion, which it contained without operational disruption. The organization is investigating claims that data was stolen and has notified authorities.
Key points
- APUC confirmed unauthorized access to certain historical data on its IT systems in a mid-July cyberattack.
- The organization says it acted immediately to contain the intrusion and has had no operational disruption.
- APUC is investigating the scope of the incident with external technical specialists and has notified relevant authorities.
- The attackers reportedly claimed to have taken historical data, but APUC is still investigating that claim.
- Sources told The Register that an extortion demand was made; the publication said it had not independently confirmed this.
- The Register reported claims that the attackers accessed the systems through an employee account and targeted data dating back 20 years; APUC did not address those claims.
Article Details
- Victim Organization
- Advanced Procurement for Universities and Colleges (APUC)
- Incident Type
- Unauthorized access to historical data; the means of access is unknown. The Register reported that sources said an employee account was used to gain administrator access, but APUC did not address that claim.
- Disclosure Date
- 2026-07-31
- Data Types Exposed
- Historical data; specific data types were not disclosed.
- Affected Data Size
- The criminals reportedly claimed the data dated back 20 years. The amount of data and whether it was stolen are unknown; APUC was investigating the theft claim.
- Operational Impact
- APUC said it contained the intrusion immediately and reported no disruption to day-to-day activities.
- Ransom Or Extortion
- Sources claimed APUC received an extortion demand; The Register had not independently confirmed this. APUC did not address the claim. Ransomware involvement was not established.
- Claim Status
- confirmed