University of Nottingham

Disclosed Jun 10, 2026454,600 affectedUnverified

Nottingham University PeopleSoft breach exposes 454,600 students

The University of Nottingham confirmed ShinyHunters accessed its student records system through Oracle PeopleSoft vulnerabilities and stole over 40 GB, affecting 454,600 current and former students across its UK, Malaysia and China campuses. It reported the breach to the ICO.

What is known

People affected	454,600 (as reported by the organization)
Disclosed	Jun 10, 2026
Happened	Jun 9, 2026
Attack	Hacking
Data exposed	Dates of birthEmailsIP addressesNamesGovernment IDsPhone numbersAddressesFinancialEducation recordsPayment cardsHealth
Sector	Education · GB
Status	Unverified: not yet confirmed by an official notice, a filing or the organization
Part of	Oracle peoplesoft (2026)
Check your email	Have I Been Pwned

Sources

Aggregatorhaveibeenpwned.com

Have I Been Pwned: University of Nottingham

Newsbleepingcomputer.com

Nottingham University data breach affects over 450,000 students

Notices filed

Accounts in the dataJun 10

Have I Been Pwned454,635 people

TotalJun 11

Research454,600 people

Same campaign

FBIExtortion exposed names and employment records.ExtortionGovernmentUSUnverifiedSep 22

National Association of Insurance CommissionersNAIC says ShinyHunters took public data in PeopleSoft zero-day breachHackingGovernmentUSUnverifiedJun 29

History of this record

source_type2026-09-25

aggregator to pressby seedSource

source_url2026-09-25

https://haveibeenpwned.com/Breach/UniversityOfNottingham to https://www.bleepingcomputer.com/news/security/nottingham-university-data-breach-affects-over-450-000-students/by seedSource

campaign2026-09-25

empty to oracle-peoplesoft-2026by seedSource

country2026-09-25

empty to GBby seedSource

attack2026-09-25

extortion to hackingby seedSource

data_types2026-09-25

["dob","emails","ip-addresses","names","government-id","phone","addresses","financial"] to ["dob","emails","ip-addresses","names","government-id","phone","addresses","financial","education","payment-card","health"]by seedSource

records_basis2026-09-25

hibp to organizationby seedSource

records2026-09-25

454635 to 454600by seedSource

summary2026-09-25

In June 2026, the University of Nottingham was the target of a cyber attack , later linked to a ShinyHunters "pay or leak" extortion campaign. Tens of gigabytes of data were subsequently published online and included 455k unique email addre to The University of Nottingham confirmed ShinyHunters accessed its student records system through Oracle PeopleSoft vulnerabilities and stole over 40 GB, affecting 454,600 current and former students across its UK, Malaysia and China campusesby seedSource

title2026-09-25

empty to Nottingham University PeopleSoft breach exposes 454,600 studentsby seedSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.

Everything about University of Nottingham