ConfirmedData breach
University of Nottingham: a data breach
In June 2026, the University of Nottingham was the target of a cyber attack , later linked to a ShinyHunters "pay or leak" extortion campaign. Tens of gigabytes of data were subsequently published online and included 455k unique email addresses along with extensive personal information including names, addresses, phone numbers, ethnicities, disabilities, passport numbers and information relating to academic enrolments and fee payments. In a post about the incident , the university advised that the breach affected both "current students, and alumni".
The record
- Organisation
- University of Nottingham →
- Identity
- University of Nottinghamidentified by its domain in a verified breach record
- Records affected
- 454,635 records
- Data exposed
- Academic records, Citizenship statuses, Dates of birth, Disabilities, Email addresses, Ethnicities, Genders, IP addresses, Names, Passport numbers, Phone numbers, Physical addresses, Purchases, Salutations, Usernames
- Sector
- Not recorded
- Occurred
- 2026-06-09
- Disclosed
- 2026-06-10
- First recorded here
- 2026-09-09
Sources (1)
One source so far.
- Have I Been Pwned ↗First reported
2026-06-10