UK Cybercrime Journal: University of Nottingham Breached by ShinyHunters

ShinyHunters (UNC6240) conducted an active intrusion and extortion campaign exploiting a critical Oracle PeopleSoft zero-day (CVE-2026-35273, RCE, CVSS 9.8) that resulted in the leak of over 40GB of University of Nottingham data (including >455,000 unique emails and sensitive PII such as passport numbers and dates of birth); Google and other researchers observed the group targeting education-sector organisations, exposed infrastructure and MeshCentral agent usage, and warned that many additional academic institutions may be affected.