ShadowByt3$ Claims Data Theft at Knottingham Trent University
Summary
Ransomware.live lists ShadowByt3$’s unconfirmed claim that it accessed Knottingham Trent University’s portal, stole personal and academic data, and threatened to leak it unless demands were met.
Key points
- The article attributes the claim to ShadowByt3$ and says the alleged breach occurred on August 19, 2026.
- The group allegedly accessed the university portal via webapps[.]ntu[.]ac[.]uk and took data before access was locked.
- The claimed data includes passport details, contact and address information, academic records, employment history, and references.
- The actor allegedly threatened to leak the data and damage the university’s reputation if demands were not met.
- The post says the claims are unconfirmed and offers to share an official university statement.
Article Details
- Victim
- Knottingham Trent University
- Victim Domain
- webapps.ntu.ac.uk
- Attack Date
- 2026-08-19
- Encryption Status
- Unknown; the source does not state whether data was encrypted.
- Encrypted Size
- Unknown
- Exfiltration Status
- Alleged; the source says data was taken, but the claim is unverified and not victim-confirmed.
- Exfiltrated Data
- The group allegedly took personal data, including passport details, dates of birth, contact information, home addresses, academic records, and employment records. The source does not confirm the claim or the data's authenticity.
- Exfiltrated Size
- Unknown
- Ransom Demand
- A demand is implied by the threatened leak, but its terms and amount are not disclosed.
- Leak Status
- The group allegedly threatened to leak the data; no publication is confirmed.