The University of Nottingham has confirmed that a 'significant' amount of student data was accessed in a major cyber-attack, reportedly carried out by a group known as the Shinyhunters. The breach, which targeted the university's Campus Solutions platform, has exposed personal, financial, and contact information of students during the exam season.
Details of the Breach
Hackers gained access to the student records system at the end of May, potentially revealing sensitive data such as National Insurance numbers, educational history, and financial details. The university took the system offline to conduct an investigation, leading to disruptions in exam marking.
University Response
In an email to students, Jason Carter, the university's chief governance and risk officer, described the incident as a 'serious incident' and expressed deep regret. He advised students to be vigilant against unexpected or suspicious communications, especially those requesting financial information, and to change their passwords.
A University of Nottingham spokesperson stated: 'The University of Nottingham has been the victim of a cyber incident and a significant amount of data in our student record system has been accessed by a well-known cybercriminal group. We are working with the third party that maintains the platform to lead a forensic investigation.'
The university has reported the incident to Action Fraud and the Information Commissioner's Office (ICO), and is offering advice and support to affected students.
Impact on Students and Exams
Staff members have expressed concern that if the hacked software remains offline, it could be 'hugely disruptive' to exam marking. One employee noted that the system stores 'everything' about students and that the breach may have compromised data of thousands of individuals.
Law Enforcement Involvement
The National Crime Agency (NCA) confirmed it is aware of the breach and is working with partners to assess the impact. An NCA spokesperson said: 'We are aware of an incident affecting the University of Nottingham and are working alongside partners to better understand the impact.'
The university has urged students to remain cautious and to report any suspicious activity. Further updates are expected as the investigation progresses.
