Russell Group Universities Face Wave of Cyber Attacks, Exposing Student Data Russell Group universities have become prime targets for cybercriminals, with recent attacks exposing sensitive student data, including passport numbers, financial details, and national insurance numbers. The University of Nottingham is the latest victim, confirming a breach affecting approximately 455,000 records including email addresses, postal addresses, and financial information. The incident, attributed to a well-known cybercriminal group, is under criminal investigation, with affected students notified and a support helpline established. Nottingham joins a growing list of Russell Group institutions hit by cyber threats since 2020. In 2024, the University of Cambridge and the University of Manchester suffered DDoS attacks by hacktivist group Anonymous Sudan, disrupting IT services but causing no data theft. Earlier breaches include Imperial College London (2023), where hackers accessed student names and financial records, and Newcastle University (2020), which refused a ransom demand, leading to stolen data being published on the dark web. The University of Edinburgh also faced a 2020 attack, with crypto-mining malware compromising its ARCHER supercomputer. The University of Warwick’s 2019 breach remained undisclosed to students and staff for over six months, with security flaws preventing a full assessment of compromised data. Meanwhile, a 2020 attack on Blackbaud, a fundraising software used by multiple universities, impacted institutions including Birmingham, Exeter, Glasgow, Leeds, Liverpool, Reading, Strathclyde, and York. The University of Oxford also reported a 2026 breach, where hackers accessed student contact details and encrypted passwords via its CareerConnect platform, though university passwords remained secure. Authorities, including the National Cyber Security Centre and the Information Commissioner’s Office, have been notified in several cases, underscoring the escalating cyber risks facing higher education.

Ransomware Attack Disrupts Check-In Systems at Major European Airports A ransomware attack targeting Collins Aerospace, a key supplier of automated check-in systems, caused widespread disruptions at several of Europe’s busiest airports on February 10–12, 2026. The incident, confirmed by the EU’s cybersecurity agency (ENISA), locked critical data and forced airports to revert to manual processes, leading to flight cancellations and delays. Affected Airports and Impact - Brussels Airport reported 29 cancellations and only 42% of flights departing on time, with staff using iPads and laptops for manual check-ins. - London Heathrow, Europe’s busiest airport, implemented contingency measures as airlines struggled with system outages. - Berlin Airport, already strained by high passenger volumes due to the Berlin Marathon, faced delays exceeding one hour for departures. - Dublin Airport experienced minimal impact, relying on manual boarding procedures, including handwritten passes. Scope and Response Collins Aerospace, owned by RTX, stated it was working with affected airports to restore full functionality, with updates nearing completion. ENISA confirmed law enforcement involvement but did not disclose the attack’s origin. Sophos threat intelligence director Rafe Pilling noted that while high-profile ransomware attacks are more visible, they are not necessarily increasing in frequency though their disruptive potential remains a growing concern for critical infrastructure. Broader Context The incident underscores the vulnerability of aviation systems to cyber threats. A recent Bitkom survey found ransomware as the most common cyberattack against German companies, with one in seven paying ransoms. Despite the disruption, analysts emphasize that large-scale attacks with physical-world consequences remain rare.