A threat actor is selling the database of the University of Cádiz (UCA), a public university located in the province of Cádiz, Andalusia, Spain. The post claims the database contains records from 2011 to October 2025.
According to the actor, the compromised database contains 40,000 student records. The exposed personal information allegedly includes:
- Full names (first and second surnames, first name)
- Date of birth
- NIF number (National Identification Number)
- Email addresses
- Mobile phone numbers
- Qualification
- Department
- Center
