Oxford University Discloses Data Breach via Third-Party Career Platform The University of Oxford revealed a data breach last week after its third-party career services provider, Group GTI, reported that its CareerConnect platform had been compromised. The incident exposed personal data of students, alumni, research staff, and employer users across multiple UK universities, including Oxford, King’s College London, and the University of Manchester. The breach occurred on May 28, when attackers accessed users’ first and last names, email addresses, and encrypted passwords though only for those who logged in directly through CareerConnect rather than via Single Sign-On (SSO). Group GTI invalidated the affected passwords, requiring users to reset them upon next login. Oxford’s assessment indicated the attack was likely aimed at credential harvesting, potentially enabling future phishing campaigns. The university confirmed that no course details, financial data, or uploaded files were compromised, and its internal systems remained unaffected. A university spokesperson told BleepingComputer that the incident did not involve ransomware, and no attribution or claims of responsibility have been reported. This marks Oxford’s second data breach in 2025. In early May, the ShinyHunters extortion group breached Instructure’s Canvas learning management system, which Oxford uses. The hackers claimed to have stolen 280 million records from over 8,800 educational institutions globally. Instructure later confirmed the data was returned after negotiations, with logs verifying its destruction. Oxford stated that the exposed data included usernames, Canvas email addresses, user messages, course names, and enrollment details, but its own systems were not breached.