[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f20rlaa2emnpud":3,"$f3tflyk1vd0q6e":71},{"success":4,"breach":5},true,{"_id":6,"name":7,"title":8,"slug":9,"domain":10,"breachDate":11,"addedDate":12,"publishedAt":13,"modifiedDate":13,"contentUpdatedAt":13,"source":14,"sourceUrl":15,"sourceUrls":16,"pwnCount":19,"affectedCount":19,"affectedCountStatus":20,"affectedCountLowerBound":21,"affectedCountUnit":22,"hasEnglishDescription":4,"contentLocale":23,"availableLocales":24,"translations":34,"severity":45,"dataClasses":46,"description":62,"seoTitle":63,"seoDescription":64,"logoUrl":65,"isVerified":4,"isSensitive":4,"isSpamList":66,"isMalware":66,"company":67},"6a452308a20f867c8ba8e778","University of Nottingham","University of Nottingham 2026年数据泄露","university-of-nottingham","nottingham.ac.uk","2026-06-09T00:00:00.000Z","2026-06-10T22:13:31.000Z","2026-10-09T19:49:15.999Z","Verified breach record","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fnottingham-university-data-breach-affects-over-450-000-students\u002F",[15,17,18],"https:\u002F\u002Fthetab.com\u002F2026\u002F06\u002F12\u002Fcriminal-hacker-group-threatens-to-publish-nottingham-students-data-online-if-uni-doesnt-pay","https:\u002F\u002Fwww.itpro.com\u002Fsecurity\u002Fnottingham-university-cyber-attack-everything-we-know-so-far-as-shinyhunters-claims-responsibility",343752,"known",null,"unknown","zh",[25,26,23,27,28,29,30,31,32,33],"en","tr","hi","es","ar","fr","bn","pt","ru",{"en":35,"tr":36,"zh":37,"hi":38,"es":39,"ar":40,"fr":41,"bn":42,"pt":43,"ru":44},{"slug":9},{"slug":9},{"slug":9},{"slug":9},{"slug":9},{"slug":9},{"slug":9},{"slug":9},{"slug":9},{"slug":9},"High",[47,48,49,50,51,52,53,54,55,56,57,58,59,60,61],"Academic records","Citizenship statuses","Dates of birth","Disabilities","Email addresses","Ethnicities","Genders","IP addresses","Names","Passport numbers","Phone numbers","Physical addresses","Purchases","Salutations","Usernames","\u003Cp>University of Nottingham 数据泄露事件是一起影响重大的教育行业事件，于2026年6月9日为外界所知，涉及与该大学相关的账户。该记录包含学业记录、出生日期、护照号码、电话号码、地址、IP 地址、用户名和人口统计字段，以及约454,635个唯一电子邮箱地址。这些数据相互结合，不仅增加了针对电子邮箱的网络钓鱼风险，也增加了学生、校友、教职员工和申请者遭到长期定向攻击的风险。\u003C\u002Fp>\n\u003Ch2>泄露的数据类型与风险\u003C\u002Fh2>\n\u003Cp>泄露的数据类型包括学业记录、公民身份状况、出生日期、残障信息、电子邮箱地址、族裔背景字段、性别信息、IP 地址、全名、护照号码、电话号码、实际地址、购买数据、称谓信息和用户名。这些字段即使单独存在，也可能具有敏感性；组合起来后，则能勾勒出一个人的教育背景、身份信息、联系方式及其与大学之间的关系。护照号码和出生日期可能在身份核验过程中被滥用。地址、电话和电子邮箱字段可被用于编造更具迷惑性的诈骗情境。学业记录和残障信息涉及高度隐私，因此该记录应归类为敏感记录。\u003C\u002Fp>\n\u003Ch2>已核实的范围与边界\u003C\u002Fh2>\n\u003Cp>已核实的范围包括约454,635个受影响账户，以及上述数据类别。该记录与 University of Nottingham 的域名相关，所属行业为教育。在这一范围内，支付卡号、银行账户、密码、私信内容或完整文件副本均未被列为已核实的字段。因此，风险评估仅限于已核实的学业、身份、联系和人口统计字段。泄露发生于2026年；这条泄露记录对应的是2026年期间的已核实数据集，而不是2025年收录的旧事件。区分这两者，对于正确理解“账户安全”页面上的事件时间十分重要。\u003C\u002Fp>\n\u003Ch2>可能面临风险的用户群体\u003C\u002Fh2>\n\u003Cp>可能面临风险的群体包括学生、毕业生、教学科研人员、行政人员、潜在学生，以及曾使用大学服务并发生交易的人员。对于记录中包含护照号码、公民身份状况、出生日期和地址信息的用户，网络钓鱼消息可能更具迷惑性。学业记录受到影响的人员，面临更高的基于教育背景的定向攻击、奖学金或入学主题诈骗，以及社会工程攻击风险。对于同时包含电话号码和电子邮箱地址的账户，可能有人尝试通过多种渠道联系相关用户。用户名和 IP 地址等技术字段还会在账户匹配、位置推测和会话安全检查方面带来额外风险。\u003C\u002Fp>\n\u003Ch2>应立即采取的措施\u003C\u002Fh2>\n\u003Cp>受影响用户应为大学账户、个人电子邮箱账户，以及使用同一组登录凭据的其他服务设置高强度且不重复的密码。如果尚未启用多因素身份验证，应立即启用。对于突然收到的、以大学、奖学金、注册、签证、护照、付款或学生服务为主题的消息，应仔细核查。通过电话收到核验请求时，不应透露个人信息，并应通过官方渠道进一步确认交易请求。应监控官方账户的活动，留意包含护照号码或出生日期的可疑申请。用户应检查邮箱过滤规则、会话历史和账户恢复信息，查找未经授权访问的迹象。\u003C\u002Fp>\n\u003Ch2>长期安全策略\u003C\u002Fh2>\n\u003Cp>这一事件体现了教育机构集中存储身份信息、学业记录和通信数据的风险。机构应缩短数据保留期限，按岗位职责限制访问权限，并对高度敏感的数据区域设置独立的防护层。护照号码、残障信息和人口统计字段应接受定期访问审计。对于用户而言，使用密码管理器、多因素身份验证和独立的电子邮箱地址，有助于加强长期防护。发生类似事件后，仅修改密码并不足够；还应持续关注网络钓鱼风险，并定期检查账户恢复信息和官方通知渠道。\u003C\u002Fp>\n\u003Ch2>记录核查与用户行动\u003C\u002Fh2>\n\u003Cp>如果该电子邮箱地址曾用于学生、教职员工、校友或申请账户，风险可能更高。虽然该记录并未确认密码泄露，但由于包含大量身份和联系字段，仍被视为敏感记录。用户应检查使用同一电子邮箱地址的重要账户的登录历史，及时更新恢复邮箱和电话号码，并通过官方渠道核实可疑消息，不要直接回复。由于护照、地址或出生日期等字段无法更改，应长期保持对网络钓鱼的警惕。\u003C\u002Fp>","University of Nottingham 2026年数据泄露 (343.8 千 已报告记录数)","University of Nottingham 2026年数据泄露. 据报告，涉及343.8 千条记录。 已报告的数据：学业记录, 公民身份状态, 出生日期。 了解影响范围、风险及防护措施。","\u002Fuploads\u002Flogo\u002Fnottingham_ac_uk.webp",false,{"name":7,"sector":68,"country":69,"website":10,"websiteArchiveUrl":70,"websiteStatus":70,"websiteCheckedAt":21},"Education","United Kingdom","",{"success":4,"breaches":72},[73,81,88,94],{"slug":74,"title":75,"companyName":76,"logoUrl":77,"breachDate":78,"affectedCount":79,"affectedCountStatus":80},"rectory-school-2026","Rectory School 数据泄露事件（至少91人受影响）","Rectory School","\u002Fuploads\u002Flogo\u002Frectory-school.png","2026-07-21T00:00:00.000Z",91,"lower_bound",{"slug":82,"title":83,"companyName":84,"logoUrl":85,"breachDate":86,"affectedCount":21,"affectedCountStatus":87},"sumner-county-schools-2026","Sumner County Schools 2026 年数据泄露事件","Sumner County Schools","\u002Fuploads\u002Flogo\u002Fsumner-county-schools-2026.webp","2026-07-20T00:00:00.000Z","not_disclosed",{"slug":89,"title":90,"companyName":91,"logoUrl":92,"breachDate":86,"affectedCount":93,"affectedCountStatus":80},"umass-amherst-2026","UMass Amherst 数据泄露事件","University of Massachusetts Amherst","\u002Fuploads\u002Flogo\u002Fumass-amherst.png",1,{"slug":95,"title":96,"companyName":97,"logoUrl":98,"breachDate":99,"affectedCount":100,"affectedCountStatus":20},"houston-city-college-2026","Houston City College 2026年数据泄露事件","Houston City College","\u002Fuploads\u002Flogo\u002Fhouston_city_college.png","2026-06-16T00:00:00.000Z",831642]