Oxford University Suffers Second Data Breach in a Month, Exposing Alumni and Staff Data Oxford University has confirmed a second data breach in under a month, this time targeting CareerConnect, its career services platform, on May 28. The attack exposed the personal data of alumni, research staff, and recruiters, marking another security incident for the institution following a prior breach in April. The compromised platform, CareerConnect, is operated by London-based tech firm Group GTI and serves as a job-matching tool for students, graduates, and employers. The breach exposed full names and email addresses of affected users, while those not using single sign-on (SSO) authentication also had their encrypted passwords leaked. Oxford stated that no course details, uploaded files, appointment data, or financial records were accessed. The university attributed the attack to a patched security vulnerability and has since reset passwords for impacted accounts. Group GTI, the platform provider, informed Oxford that the hack appeared to be credential-focused, potentially enabling future phishing attempts. However, the company has not publicly released further details. Given that Group GTI’s TargetConnect platform supports career services for 8,800 educational institutions worldwide, concerns remain over whether Oxford was the sole target or if other universities may have been affected but have yet to report breaches. The incident follows a broader pattern of cyber threats against academic institutions, with 275 million students, teachers, and employees globally impacted by similar attacks in recent months.