Data breach
University of Nottinghamnottingham.ac.uk
454 635 accounts exposed in a breach dated 2026-06-09.
Breached2026-06-09Added to HIBP2026-06-10 UTCUpdated by HIBP2026-06-10 UTCAccounts454 635Domainnottingham.ac.uk
Verified
What happened in Have I Been Pwned’s words
In June 2026, the University of Nottingham was the target of a cyber attack, later linked to a ShinyHunters "pay or leak" extortion campaign. Tens of gigabytes of data were subsequently published online and included 455k unique email addresses along with extensive personal information including names, addresses, phone numbers, ethnicities, disabilities, passport numbers and information relating to academic enrolments and fee payments. In a post about the incident, the university advised that the breach affected both "current students, and alumni".
Exposed data as HIBP classifies it
- Academic records
- Citizenship statuses
- Dates of birth
- Disabilities
- Email addresses
- Ethnicities
- Genders
- IP addresses
- Names
- Passport numbers
- Phone numbers
- Physical addresses
- Purchases
- Salutations
- Usernames
How HIBP qualifies it
- HIBP verified that the data came from this service.
Source: Have I Been Pwned (CC BY 4.0)
Copied from HIBP 2026-11-05 03:50 UTC