University of South Wales

Profile narrative

The University of South Wales is a higher education institution based in the United Kingdom, operating as a public university serving students across multiple campuses. As a university, its core function is delivering higher education through undergraduate and postgraduate degree programmes, alongside research activities and professional development courses. The institution serves a diverse student body that includes domestic UK applicants, international students, and learners engaged in part-time and continuing professional development. Its academic scope covers a broad range of disciplines typical of a modern UK university, including areas such as business, computing, engineering, health sciences, creative industries, and education. The university also engages with external partners, including businesses and community organisations, through collaborative research, consultancy, and knowledge exchange initiatives.

In terms of scale, the University of South Wales is one of the larger universities in Wales, formed from the merger of the University of Glamorgan and the University of Wales, Newport, in 2013, though specific student population figures, revenue, or staff counts are not detailed in the available source material. The institution has historically attracted students from across the UK and internationally, and it maintains partnerships with various organisations for placement opportunities and academic collaboration. The university's footprint includes multiple campuses, with locations in Cardiff, Newport, and Pontypridd among its primary sites. Because exact quantitative measures of its size are not provided in the available context, specific metrics regarding enrolment, income, or staff numbers are not included here.

The University of South Wales gained particular attention in the cybersecurity domain due to its involvement in a significant data breach incident. In September 2020, a ransomware attack on Blackbaud, a third-party cloud service provider used by the university for fundraising and alumni relations, resulted in the compromise of personal data belonging to students, staff, and partners. The exposed information included names, dates of birth, addresses, and contact details. The university notified potentially affected individuals and advised them to follow standard security practices in response to the incident. Legal actions were subsequently brought against the institution and other affected universities, alleging that inadequate data protection measures were in place prior to the breach and that the universities bore responsibility for safeguarding personal information entrusted to third-party providers. These legal claims raised questions about compliance with the UK General Data Protection Regulation and the Data Protection Act 2018, with affected individuals seeking compensation for distress and loss of control over their personal data.

As a UK public university, the University of South Wales is subject to regulatory oversight by bodies including the Higher Education Funding Council for Wales and the Office for Students in England, as well as data protection supervision by the Information Commissioner's Office. Its involvement in the Blackbaud incident highlighted broader sector-wide concerns about supply chain security and the responsibilities of universities to vet and monitor the cybersecurity practices of their third-party service providers. The university operates as an independent, self-governing higher education institution and is not a subsidiary of another corporate entity.

Incidents

1 incident linked to this organisation.