TLDR Tech / InfoSec
Nottingham University data breach affects over 450,000 students
ShinyHunters compromised the University of Nottingham's Oracle PeopleSoft instance via a zero-day gadget chain, exfiltrating 40GB of data on 454,600 students, including passport numbers, billing records, addresses, and disability details. This incident was part of a campaign that targeted 100+ organizations using chained zero-days and legacy vulnerabilities. Exploitation success depends on PeopleSoft configuration and exposure. Monitor PSAPPSRV.LOG and PS_HOME/appserv logs for anomalous SQL data extraction and access patterns, validate PeopleSoft patch versions, and enforce IP allow-listing with MFA on admin accounts.
Read the full story