University of Nottingham says student and alumni data was compromised

The University of Nottingham said a cyber incident exposed a significant amount of data belonging to current and former students, and warned that people connected to its campuses in Nottingham, Malaysia, and China may be affected. The university said it is still determining exactly what was accessed, but is treating contact details, university-related information, financial data, and sensitive personal information as potentially compromised while a third-party forensic investigation continues. It has notified affected students and alumni and published a notice confirming that student and alumni data had been compromised.

The ShinyHunters cybercrime group claimed responsibility on its extortion site, alleging it stole more than 40GB of material including credit card and payment details. Analysis of partially published data by Have I Been Pwned indicated the leak contains about 455,000 unique email addresses along with extensive personal information, although the full scope remains unverified and ShinyHunters has previously been accused of exaggerating or misrepresenting stolen data in extortion campaigns.