Nelson University Hit by Qilin Ransomware Attack, Exposing Sensitive Data
Nelson University, a private Christian institution in Waxahachie, Texas, suffered a ransomware attack between March 21 and April 6, 2025, orchestrated by the cybercriminal group Qilin. The attackers claimed to have exfiltrated sensitive data and threatened to publish it on the dark web. On April 16, 2025, the breach was confirmed when the stolen information appeared on the Tor network.
While the full scope of exposed data remains undisclosed, potential compromised details may include names, Social Security numbers, financial information, and contact details. The university reported the incident to the California Attorney General on June 15, 2026, and subsequently notified affected individuals, establishing a response line for inquiries.
Legal firm Shamis & Gentile P.A. is investigating the breach, indicating that impacted individuals may be eligible for compensation. The incident underscores the growing threat of ransomware attacks targeting educational institutions and the risks of delayed breach disclosures.
Source: https://www.claimdepot.com/investigations/nelson-university-data-breach-2026
Nelson Mandela University Alumni cybersecurity rating report: https://www.rankiteo.com/company/nelson-mandela-university-alumni
"id": "NEL1781714273",
"linkid": "nelson-mandela-university-alumni",
"type": "Ransomware",
"date": "3/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'industry': 'Education',
'location': 'Waxahachie, Texas, USA',
'name': 'Nelson University',
'type': 'Educational Institution'}],
'customer_advisories': 'Notification to affected individuals with a response '
'line for inquiries',
'data_breach': {'data_exfiltration': True,
'personally_identifiable_information': ['Names',
'Social Security '
'Numbers',
'Contact Details'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personally Identifiable '
'Information',
'Financial Information']},
'date_detected': '2025-03-21',
'date_publicly_disclosed': '2025-04-16',
'description': 'Nelson University, a private Christian institution in '
'Waxahachie, Texas, suffered a ransomware attack between March '
'21 and April 6, 2025, orchestrated by the cybercriminal group '
'Qilin. The attackers claimed to have exfiltrated sensitive '
'data and threatened to publish it on the dark web. On April '
'16, 2025, the breach was confirmed when the stolen '
'information appeared on the Tor network.',
'impact': {'brand_reputation_impact': True,
'data_compromised': True,
'identity_theft_risk': True,
'legal_liabilities': True,
'payment_information_risk': True},
'investigation_status': 'Ongoing (legal investigation by Shamis & Gentile '
'P.A.)',
'motivation': 'Financial gain',
'ransomware': {'data_exfiltration': True, 'ransomware_strain': 'Qilin'},
'references': [{'source': 'California Attorney General Breach Notification'}],
'regulatory_compliance': {'legal_actions': 'Potential compensation claims via '
'Shamis & Gentile P.A.',
'regulatory_notifications': ['California Attorney '
'General (reported on '
'2026-06-15)']},
'response': {'communication_strategy': 'Notification to affected individuals, '
'establishment of a response line',
'third_party_assistance': 'Shamis & Gentile P.A. (legal '
'investigation)'},
'threat_actor': 'Qilin',
'title': 'Nelson University Qilin Ransomware Attack',
'type': 'Ransomware'}