Oxford University Reports Data Breach Following Cyberattack

The University of Oxford announced on June 6, 2026, a data incident caused by a cyberattack on the CareerConnect career platform. The incident was reported by the third-party provider Group GTI, which operates the platform. The university has promptly taken measures to verify data security and inform affected users. Initial information indicates that personal data of users of the platform is involved.

This includes names, email addresses, and possibly other sensitive information. However, the university emphasized that no financial data or passwords were compromised. The exact number of affected users is currently unclear. The university's security department is working closely with Group GTI to determine the causes of the attack. Preliminary analyses suggest that the attackers may have exploited vulnerabilities in the software.

The university has already engaged external security experts to assist with the investigation. It has informed all users of CareerConnect and recommends that they check their accounts for suspicious activities. Additionally, users are advised to change their passwords, even though no passwords were stolen. The university has also set up a hotline to address questions from affected users. The CareerConnect platform is widely used by students and graduates to find job offers and internships.

The university has stressed that the security of its users' data is of utmost priority and that it will do everything possible to ensure the platform's security. Cyberattacks on educational institutions have increased in recent years. According to a study by the cybersecurity association EDUCAUSE, there was a 30% rise in cyber incidents at colleges in the U.S. and Europe in 2025. The University of Oxford is not the first institution to be affected by such an incident. The university has announced that it will review and, if necessary, adjust the security measures on CareerConnect.

This may include the implementation of additional security protocols and regular security audits. The university plans to keep users informed about all progress and changes. The UK’s Information Commissioner’s Office (ICO) has been notified of the incident. The University of Oxford is expected to cooperate with the agency to ensure that all legal requirements are met. The ICO has previously investigated several educational institutions for inadequate security measures.

The university has also announced that it will offer training for staff and students to raise awareness about cybersecurity. These trainings aim to enhance awareness of potential threats and encourage users to develop security-conscious behaviors. The incident has already sparked discussions about the need for increased security measures in educational institutions. Experts are calling for universities to invest more in cybersecurity to prevent future attacks. The University of Oxford has emphasized that it will take the necessary steps to improve the security of its systems. On June 2026, it informed the public about the incident and plans to provide further information once the investigation is complete.