University of Nottingham
Disclosed Jun 10, 20263 months ago454,600 affectedUnverified
Nottingham University PeopleSoft breach exposes 454,600 students
The University of Nottingham confirmed ShinyHunters accessed its student records system through Oracle PeopleSoft vulnerabilities and stole over 40 GB, affecting 454,600 current and former students across its UK, Malaysia and China campuses. It reported the breach to the ICO.
What is known
| People affected | 454,600 (as reported by the organization) |
|---|---|
| Disclosed | Jun 10, 2026 |
| Happened | Jun 9, 2026 |
| Attack | Hacking |
| Data exposed | Dates of birth, Emails, IP addresses, Names, Government IDs, Phone numbers, Addresses, Financial, Education records, Payment cards, Health |
| Sector | Education · GB |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
| Part of | Oracle peoplesoft (2026) |
| Check your email | Have I Been Pwned |
Sources
| Source | |
|---|---|
| Have I Been Pwned: University of Nottinghamhaveibeenpwned.com · Aggregator | Aggregator |
| Nottingham University data breach affects over 450,000 studentsbleepingcomputer.com · News | News |
Notices filed
| Where | Filed | People |
|---|---|---|
| Have I Been Pwnedaccounts in the data | Jun 10 | 454,635 |
| Researchtotal | Jun 11 | 454,600 |
Same campaign
| Organization | Affected | ||||
|---|---|---|---|---|---|
| Sep 223 days ago | Extortion | Government | Unverified | Unknown | |
| Jun 292 months ago | Hacking | Government | Unverified | Unknown |
History of this record
- 2026-09-25 · source_type: aggregator to press · seed source
- 2026-09-25 · source_url: https://haveibeenpwned.com/Breach/UniversityOfNottingham to https://www.bleepingcomputer.com/news/security/nottingham-university-data-breach-affects-over-450-000-students/ · seed source
- 2026-09-25 · campaign: empty to oracle-peoplesoft-2026 · seed source
- 2026-09-25 · country: empty to GB · seed source
- 2026-09-25 · attack: extortion to hacking · seed source
- 2026-09-25 · data_types: ["dob","emails","ip-addresses","names","government-id","phone","addresses","financial"] to ["dob","emails","ip-addresses","names","government-id","phone","addresses","financial","education","payment-card","health"] · seed source
- 2026-09-25 · records_basis: hibp to organization · seed source
- 2026-09-25 · records: 454635 to 454600 · seed source
- 2026-09-25 · summary: In June 2026, the University of Nottingham was the target of a cyber attack , later linked to a ShinyHunters "pay or leak" extortion campaign. Tens of gigabytes of data were subsequently published online and included 455k unique email addre to The University of Nottingham confirmed ShinyHunters accessed its student records system through Oracle PeopleSoft vulnerabilities and stole over 40 GB, affecting 454,600 current and former students across its UK, Malaysia and China campuses · seed source
- 2026-09-25 · title: empty to Nottingham University PeopleSoft breach exposes 454,600 students · seed source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.