Russell Group Universities Face Wave of Cyber Attacks, Exposing Student Data Russell Group universities have become prime targets for cybercriminals, with recent attacks exposing sensitive student data, including passport numbers, financial details, and national insurance numbers. The University of Nottingham is the latest victim, confirming a breach affecting approximately 455,000 records including email addresses, postal addresses, and financial information. The incident, attributed to a well-known cybercriminal group, is under criminal investigation, with affected students notified and a support helpline established. Nottingham joins a growing list of Russell Group institutions hit by cyber threats since 2020. In 2024, the University of Cambridge and the University of Manchester suffered DDoS attacks by hacktivist group Anonymous Sudan, disrupting IT services but causing no data theft. Earlier breaches include Imperial College London (2023), where hackers accessed student names and financial records, and Newcastle University (2020), which refused a ransom demand, leading to stolen data being published on the dark web. The University of Edinburgh also faced a 2020 attack, with crypto-mining malware compromising its ARCHER supercomputer. The University of Warwick’s 2019 breach remained undisclosed to students and staff for over six months, with security flaws preventing a full assessment of compromised data. Meanwhile, a 2020 attack on Blackbaud, a fundraising software used by multiple universities, impacted institutions including Birmingham, Exeter, Glasgow, Leeds, Liverpool, Reading, Strathclyde, and York. The University of Oxford also reported a 2026 breach, where hackers accessed student contact details and encrypted passwords via its CareerConnect platform, though university passwords remained secure. Authorities, including the National Cyber Security Centre and the Information Commissioner’s Office, have been notified in several cases, underscoring the escalating cyber risks facing higher education.

A range of documents including Newcastle University students’ data was leaked onto the dark web after the cyberattack that disrupted the university’s IT systems in September. The files were leaked by cybercrime group Doppelpaymer on October 12th and include a full list of students, their specific departments, courses and student numbers.