Published 4 days ago • loading... • Updated 2 days ago
Nottingham Uni Says Student Records Raided After ShinyHunters Claims Cyberattack
The university said a well-known cybercriminal group accessed student records and may have exposed personal and financial details for thousands of people.
On Tuesday, June 9, the University of Nottingham detected a cyberattack on its student records system, with the ShinyHunters criminal group claiming responsibility for the breach affecting current students and alumni.
ShinyHunters utilized a "gadget chain" of vulnerabilities to infiltrate the Oracle PeopleSoft platform, compromising 454,600 records including names, addresses, phone numbers, ethnicities, disabilities, and passport numbers.
Following the breach, the university took the system offline to investigate, disrupting exam marking while staff engaged in separate industrial action involving redundancies and marking boycotts further complicated the assessment process.
Chief governance and risk officer Jason Carter described the breach as a "serious incident," apologized for "any anxiety" caused, and confirmed the university reported the incident to Action Fraud and the Information Commissioner's Office.
This marks the second UK university data breach in recent days, following Oxford University's CareerConnect platform compromise last week, as other institutions including Great Marlow School face mounting cyber threats.