University of Kashmir

The University of Kashmir suffered a data breach incident that potentially exposed the personal information of over 1 million current and former students of the varsity and employees.

The data was put on sale for just $250 on a hacking forum by the username “ViktorLustig” .

The data included personally identifiable information for current, and former students and employees that included names, registration numbers, addresses, dates of birth, phone numbers, employee data, password, email addresses and more.

Though the thread has been deleted from the hacking forum, the deleted post is still available in the Google search index, creating a serious threat to the privacy of Kashmir University students and employees.

Source: https://kashmirobserver.net/2022/08/10/kashmir-university-hacking-data-of-1-million-students-found-on-dark-web/

TPRM report: https://scoringcyber.rankiteo.com/company/university-of-kashmir

"id": "uni225671122",
"linkid": "university-of-kashmir",
"type": "Breach",
"date": "08/2022",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'customers_affected': 'Over 1 million current and '
                                              'former students and employees',
                        'industry': 'Education',
                        'location': 'Kashmir',
                        'name': 'University of Kashmir',
                        'type': 'Educational Institution'}],
 'data_breach': {'data_exfiltration': True,
                 'number_of_records_exposed': 'Over 1 million',
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information']},
 'description': 'The University of Kashmir suffered a data breach incident '
                'that potentially exposed the personal information of over 1 '
                'million current and former students of the varsity and '
                'employees. The data was put on sale for just $250 on a '
                'hacking forum by the username “ViktorLustig”. The data '
                'included personally identifiable information for current, and '
                'former students and employees that included names, '
                'registration numbers, addresses, dates of birth, phone '
                'numbers, employee data, password, email addresses and more. '
                'Though the thread has been deleted from the hacking forum, '
                'the deleted post is still available in the Google search '
                'index, creating a serious threat to the privacy of Kashmir '
                'University students and employees.',
 'impact': {'data_compromised': ['Names',
                                 'Registration Numbers',
                                 'Addresses',
                                 'Dates of Birth',
                                 'Phone Numbers',
                                 'Employee Data',
                                 'Passwords',
                                 'Email Addresses']},
 'initial_access_broker': {'data_sold_on_dark_web': True},
 'motivation': 'Financial Gain',
 'threat_actor': 'ViktorLustig',
 'title': 'University of Kashmir Data Breach',
 'type': 'Data Breach'}