Hackers had accessed data from Ahmadu Bello University (ABU), Zaria after the institute fell for a cyberattack.
The data which included admission lists, course registration details, and personal data of students and staff were shared in some exclusive hacker forums.
ABU’s database was with records of about 256,370 students.
ABU Zaria stored the login details usernames and passwords of these students in plain text and they were easily uncovered which led to a cyberattack.
Source: https://techpoint.africa/2020/06/01/nigerian-kenyan-universities-hacked
TPRM report: https://scoringcyber.rankiteo.com/company/ahmadu-bello-university-zaria-
"id": "ahm2114123",
"linkid": "ahmadu-bello-university-zaria-",
"type": "Data Leak",
"date": "06/2020",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'customers_affected': 256370,
'industry': 'Education',
'location': 'Zaria, Nigeria',
'name': 'Ahmadu Bello University (ABU), Zaria',
'type': 'Educational Institution'}],
'attack_vector': 'Unsecured Data Storage',
'data_breach': {'number_of_records_exposed': 256370,
'type_of_data_compromised': ['Admission lists',
'Course registration details',
'Personal data of students and '
'staff']},
'description': 'Hackers accessed data from Ahmadu Bello University (ABU), '
'Zaria, including admission lists, course registration '
'details, and personal data of students and staff. The data '
'was shared in exclusive hacker forums. ABU’s database '
'contained records of about 256,370 students, with login '
'details stored in plain text, leading to the cyberattack.',
'impact': {'data_compromised': ['Admission lists',
'Course registration details',
'Personal data of students and staff'],
'systems_affected': ['Database']},
'motivation': 'Data Theft',
'post_incident_analysis': {'root_causes': 'Plain text storage of login '
'details'},
'threat_actor': 'Unknown Hackers',
'title': 'Data Breach at Ahmadu Bello University (ABU), Zaria',
'type': 'Data Breach',
'vulnerability_exploited': 'Plain text storage of login details'}