University of Nottingham data breach
454,635 accounts exposed.
Check whether your email is included on Have I Been Pwned.
What was exposed
Academic recordsCitizenship statusesDates of birthDisabilitiesEmail addressesEthnicitiesGendersIP addressesNamesPassport numbersPhone numbersPhysical addressesPurchasesSalutationsUsernames
What to do
- Expect more phishing emails that mention this service. Do not click links in them; go to the site directly.
- Be wary of texts and calls that seem to know your details.
- Consider a credit freeze or fraud alert with the credit agencies in your country.
- Turn on two-step verification wherever it is offered, and use a password manager.
About this breach
In June 2026, the University of Nottingham was the target of a cyber attack, later linked to a ShinyHunters "pay or leak" extortion campaign. Tens of gigabytes of data were subsequently published online and included 455k unique email addresses along with extensive personal information including names, addresses, phone numbers, ethnicities, disabilities, passport numbers and information relating to academic enrolments and fee payments. In a post about the incident, the university advised that the breach affected both "current students, and alumni".