A threat actor has allegedly posted a database belonging to the University of the People (UoPeople) for sale on a dark web forum. UoPeople is a prominent American-accredited, non-profit, tuition-free online university, established in 2009. It provides higher education access globally, making this alleged breach particularly significant due to its international student body. The post claims the breach contains sensitive information belonging to over 517,000 unique users associated with the university.
The seller provided a sample of the data to substantiate their claims, which appears to contain a wide range of personally identifiable information (PII). The exposure of such data could place students and applicants at significant risk of phishing attacks, identity theft, and other malicious activities. The compromised data allegedly includes the following:
- Account ID
- Student ID
- First Name
- Last Name
- Phone number
- Date of Birth (DOB)
- Country of Birth
