Srinagar: The personal data of one million students of the University of Kashmir was hacked and put on sale as the varsity has fallen victim to a cyber attack.
The alleged database of the students has been put on sale for just $250 on a hacking forum by “ViktorLustig”. The name is inspired by the infamous con artist who “sold” the Eiffel Tower, not once but twice, International Business Times reported.
The threat actor has shared a database index to show the data he has in his possession. It claims to include student information, registration number, phone number, email address, password, employee data and more.
The database is listed on Breached Forums, the famous hacking forum that gained international attention earlier this month with a data breach exposing over 1 billion Chinese residents. Twitter user Abhishek Verma received a confirmation from the admin of the forum “pompompurin”, who said the alleged database is legitimate.
The University officials are yet to confirm the data breach as multiple calls by the news organization went unanswered, the report added.
According to a journalist Abhishek Verma, who writes for Google, Andriod and DroidMaze, the database of more than one million students has been put on sale. Verma also shared the screenshot of the hacked webpage.
“Just spotted an alleged database of “University of Kashmir” being sold on a hacking forum. Threat actor goes by the name “ViktorLustig” selling the database of @KmrUniversity for $250,” Verma tweeted. “He shared a Database index showing what he has.”
“Additionally, the admin of the forum goes by the name “pompompurin” replied and confirms that the alleged database is legitimate” the tweet mentioned.
“The thread has been deleted from hacking forum. But the profile of threat actor “VictorLustig” is still active on the forum,” the journalist shared.