University of Nottingham

Profile narrative

The University of Nottingham, also referred to as UoN, is a higher education institution headquartered in the United Kingdom. As a university, its core function centres on delivering higher education, conducting academic research, and contributing to knowledge exchange across multiple disciplines. It serves a student population that includes both domestic UK learners and international students, and it engages with industry, government, and other academic partners through research collaborations, consultancy, and funded programmes. Universities of this kind typically operate across faculties such as science, engineering, humanities, social sciences, medicine, and business, providing undergraduate and postgraduate teaching alongside doctoral training. While the specific scale of the University of Nottingham's operations in terms of student numbers, staff count, and financial turnover is not detailed in the available material, its presence as a recognised UK institution indicates a substantial academic and research footprint.

The University of Nottingham became directly relevant to the cybersecurity landscape through a notable data breach incident disclosed on 27 May 2026. The breach was carried out by the threat actor known as ShinyHunters, which exploited an unpatched zero‑day vulnerability in Oracle PeopleSoft. This campaign affected more than a hundred organisations, with a significant concentration of victims belonging to the higher education sector. ShinyHunters claimed responsibility for stealing data from the University of Nottingham and subsequently leaked portions of the stolen student information, while also demanding an extortion payment from the institution. Mandiant and the Google Threat Intelligence Group identified the campaign, carried out victim notification efforts, and publicly commented on the situation. Importantly, these organisations noted that the activity was ongoing at the time of reporting and that Oracle had not yet released a vendor patch to remediate the underlying vulnerability.

As a public research university in the United Kingdom, the University of Nottingham operates within a regulatory environment shaped by UK higher education standards, data protection law under the UK General Data Protection Regulation, and sector-specific guidance on information governance. The Oracle PeopleSoft platform is widely used in higher education for student records, human resources, and administrative functions, making institutions such as the University of Nottingham particularly exposed when enterprise resource planning systems are targeted. The incident underscores how threat actors specialising in data theft and extortion increasingly view universities as attractive targets because of the volume of personal data they hold and the operational importance of their core administrative systems. The specific structural details of the University of Nottingham, including any parent or subsidiary relationships, are not explicitly outlined in the provided material, so no further organisational ownership details can be confirmed from the available sources.

Incidents

1 incident linked to this organisation.