University of Hyderabad faces major data breach, promises swift action

The University of Hyderabad (UoH), a leading academic institution in southern India, has been hit by a significant data breach, raising concerns among students and faculty alike. The breach, reported in the last week of May 2024, involves a database allegedly stolen by a Threat Actor (TA) known as “nik20,” who posted the compromised data on the website BreachForums.

The stolen database, reportedly in SQL format, includes sensitive information such as user IDs, login credentials, hashed passwords, email addresses, and user registration dates. The TA claimed the breach affected high-profile accounts, including the university’s Admin, Public Relations Officer, UoH Herald-newsletter, and Vasuki Belavadi, a former dean and professor at the Department of Communications.

University officials expressed initial shock at the breach but acknowledged the possibility, citing previous cybersecurity incidents. Sanjay Kumar Sharma, Director of the Computer Network Facility at UoH, assured that while the breach is serious, it did not compromise highly sensitive data. “The data potentially breached could only contain research material from students, which is publicly available anyway,” Sharma said. He emphasized the university’s commitment to enhancing security measures and alerting affected users.

Students, however, remain anxious. Balakrishna, a PhD student, voiced concerns about the potential exposure of his research work. Meanwhile, the university’s top management is investigating the breach and has promised to keep improving its cybersecurity protocols.

Users are advised to be cautious of phishing attempts, monitor for unusual account activity, and enhance their security by enabling Two-Factor Authentication (2FA) and regularly updating passwords.

The University of Hyderabad, located in Telangana and ranked among the top 12 percent of universities worldwide for international students, continues to deal with the fallout from the breach while ensuring that all necessary steps are taken to protect their community from future cyber threats.