We’re already acting for a number of individuals who have been affected by the Greenwich University data leak from earlier this year, when it was discovered that personal student information was accessible online. Our Data Leak Lawyers are already representing victims of that breach, but now a second significant data breach has occurred as well.
Medical conditions; personal conversation records; full names and contact information; coursework; email account information; and student disability information is amongst data that was available online following a so-called “revenge hack” from a former disgruntled student.
The information that was hacked appeared online last week on the “dark web” with the source claiming to be a former disgruntled student. Security experts say an “SQL injections security flaw” was utilised which gave the hacker full control of the university’s database, resulting in very personal information being released for potentially tens of thousands of students.
Analysis showed that 21,000 email accounts alone had been compromised, with both staff and students affected by the “revenge hack”.
The news of the hack comes within months of a breach we’re already acting for people for which saw personal information for hundreds of students being inadvertently accessible online. This second breach, which is thought at this stage to be far, far bigger, given the scale of the hack, could also see additional claims for anyone affected.
What happens next?
The university will need to work with the ICO again and will need to identify anyone affected. Anyone who has been affected should be notified with specific details as to what information they have had leaked.
Can you claim?
It’s early days but we firmly believe that anyone affected by this new breach may have a valid data breach compensation claim. Even when information is hacked it is still the organisations responsibility in failing to safeguard the information in the first place. The nature of the information hacked is extremely personal and sensitive for many students and staff.
The content of this post/page was considered accurate at the time of the original posting and/or at the time of any posted revision. The content of this page may, therefore, be out of date. The information contained within this page does not constitute legal advice. Any reliance you place on the information contained within this page is done so at your own risk.