Oxford University Faces Second Major Data Breach Exposing Student Data

On May 28, 2026, Oxford University experienced a significant data breach affecting its CareerConnect platform, operated by Group GTI. This incident exposed full names and email addresses of alumni, research staff, and recruiters, while those not using single sign-on had their encrypted passwords compromised. The breach was attributed to a security vulnerability in the underlying TargetConnect software, which has been patched. Oxford University confirmed that course information and financial records were not involved in this incident. The attack is part of a worrying trend in which educational institutions are increasingly targeted by cybercriminals. The breach follows a previous incident involving another platform, Canvas, which affected millions of users globally. Group GTI has not disclosed the exact number of affected individuals or provided detailed information about the vulnerability exploited. The incident raises concerns about the security of third-party educational technology providers.

Key Points: • Oxford University's CareerConnect platform was breached, exposing user data. • The attack targeted alumni, research staff, and recruiters, compromising email addresses and passwords. • This incident follows a previous major breach at Canvas, highlighting vulnerabilities in educational tech.