The University of Nottingham confirmed on Wednesday that a hacking group breached its student records system, compromising data belonging to current and former students. The intrusion was publicly acknowledged after attackers began leaking stolen information online.
The breach affects over 450,000 individuals, including both current students and alums. The ShinyHunters hacker group has claimed responsibility, leaking more than 450,000 email addresses and other personal details. The scale of the incident places it among the larger higher education data breaches in recent years.
Initial reports indicate the attackers gained access to the university's student records system, though the specific attack vector remains undisclosed. The leaked data includes email addresses and additional information, but the full scope of compromised data has not yet been detailed by the university.
The University of Nottingham is currently investigating the breach and working to notify affected individuals. No specific patches or technical mitigations have been announced, but affected students and alums are advised to monitor their accounts for suspicious activity and remain vigilant against potential phishing attempts.
ShinyHunters is a known threat actor previously linked to breaches at other educational institutions and organizations. The incident underscores the persistent targeting of academic institutions by cybercriminal groups seeking large repositories of personal data.
The university has not confirmed whether the attacker exploited a known vulnerability or used social engineering tactics, and investigations are ongoing.