The University of Mumbai has reportedly suffered a significant data breach, compromising the sensitive personal information of over 30,000 students and teachers. The breach was revealed on BreachForums, a notorious dark web online marketplace for leaked databases, where a hacker claimed responsibility for exposing the data.
A post on BreachForums alleged that the leaked database contains crucial information, including the full names of students and faculty members, email addresses, bank details, dates of birth, login credentials, and other sensitive academic records.
A screenshot shared on the forum, which appears to be from the university’s official website, suggests that the attacker had access to highly confidential student and faculty data.
If confirmed, this breach poses a severe threat to the affected individuals. The exposed bank details and login credentials put students and teachers at risk of financial fraud, phishing attacks, and identity theft.
The University of Mumbai is one of the oldest universities in India. This premier educational institution was established in 1857 and was accorded the ‘A+++’ grade in April 2017 by the National Assessment and Accreditation Council (NAAC).
University students and staff are urged to change their university account passwords, monitor their bank accounts for any suspicious activity, and be cautious of phishing emails posing as university officials. They are also advised not to click on any suspicious links or engage with strangers online.
Recently, India suffered several cyber attacks. For instance, edtech platforms like SkilloVilla, Physics Wallah (PW), and Wissenhive were hacked. In the case of PW, sensitive data of more than two million users was up for sale.
Threat actors have targeted critical sectors in India, including the telecommunications industry. Recently, Indus Towers, the country’s largest telecom tower manufacturer, experienced a ransomware attack. Additionally, the BC Jindal Group, which operates in various industries, fell victim to data theft.
Healthcare and insurance sectors have also been targets of cyber attacks, with Bethany Hospital and Let’s Secure being notable examples.
In the News: Havoc C2 framework exploited via SharePoint in phishing campaign
