A hacking group breached the University of Nottingham’s PeopleSoft student records system and stole over 40 GB of data on 454,600 current and former students, including names, addresses, financial details and academic records. The university has reported the incident to the UK Information Commissioner’s Office and Action Fraud, while ShinyHunters claims responsibility and posted the stolen archive.

• ShinyHunters stole 40GB of data on 454,600 current and former Nottingham students, including financial details, credit card info, passport numbers, and academic records.
• The group exploited zero-day and older vulnerabilities in Oracle PeopleSoft, hitting over 100 organizations in this campaign, with Oracle yet to confirm active exploitation.
• Similar PeopleSoft-linked breaches recently hit Oxford University's CareerConnect and Instructure's Canvas LMS.