Breach University of Oxford discloses data breach via third-party career platform June 8, 2026 Share By SC Staff (Adobe Stock) Bleeping Computer reports that the University of Oxford has reported a data breach affecting its CareerConnect platform, a service provided by a third-party vendor, Group GTI. This incident raises concerns about the security of student and staff data. The breach occurred on May 28, with attackers gaining access to users' first names, last names, email addresses, and encrypted passwords for those not using Single Sign-On. The university stated that passwords for users who set them locally on CareerConnect have been invalidated and will require resetting. Group GTI indicated the breach likely aimed to gather credentials for phishing attempts. There is no evidence that sensitive information such as course details, uploaded files, appointment records, or financial data was compromised. This incident is the second data breach disclosed by Oxford this year, following a May incident involving Instructure's Canvas learning management system, which was targeted by the ShinyHunters extortion gang. While that breach affected usernames, email addresses, messages, and course information, Oxford confirmed its own systems were not compromised in either event. The university has warned users of the CareerConnect platform to be vigilant against potential phishing or scam emails. Source: Bleeping Computer SC Staff Related Breach iFood confirms data breach affecting 1.2 million users SC Staff June 4, 2026 The breach resulted in the exposure of names, phone numbers, addresses, and CPF numbers, which are crucial Brazilian taxpayer identification documents used for various daily transactions. Breach DentaQuest data breach exposes sensitive information of 2.6 million accounts SC Staff June 4, 2026 The incident came to light last month when the extortion group ShinyHunters claimed to have stolen over 234 GB of data from the company. Breach World Food Programme reports data breach affecting Palestinian beneficiaries SC Staff June 4, 2026 The World Food Programme confirmed a breach of its self-registration application (SRA) for Palestine, which occurred on May 14. Get daily email updates SC Media's daily must-read of the most current and pressing daily news Business Email By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy . Subscribe Related Terms Attack Vector You can skip this ad in 5 seconds