The University of Kashmir appears to have fallen victim to a cyberattack. Personal data of over one million students of the University of Kashmir was spotted on the dark Web. The alleged database of Kashmir University students has been put on sale for just $250 on a hacking forum by a user named “ViktorLustig”. The name is inspired by the infamous con artist who “sold” the Eiffel Tower, not once but twice. The threat actor has shared a database index to show the data he has in his possession.
As per a tweet by Abhishek Verma (@w3Abhishek), the database claims to include student information, registration number, phone number, email address, password, employee data, and more.
The database is listed on Breached Forums, a popular hacking forum that gained international attention earlier this month with a data breach exposing over 1 billion Chinese residents. Verma received a confirmation from the admin of the forum who goes by username “pompompurin”, who said the alleged database is legitimate.
While the thread has now been deleted from the platform, "pompompurin" is still active, Verma tweeted.
"The alleged breach is being analysed and as per the preliminary analysis it has been found that the data is unmodified,” a University of Kashmir spokesperson said in a statement.
"Any breach on data read (which is already accessible in public domain) is being analysed in-depth and depending upon the analysis. The university will take further course of action and take an appropriate legal recourse accordingly," the spokesperson added.