ShinyHunters may have accessed the Oracle PeopleSoft software suite at more than 100 organizations.
Photo illustration by Justin Morrison/Inside Higher Ed | SuperCubePL/iStock/Getty Images
ShinyHunters, the cybercrime group behind last month’s Canvas hack , may have gained access to human resources and financial management software at dozens of colleges, Higher Ed Dive reported Monday .
ShinyHunters may have accessed the Oracle PeopleSoft software suite at more than 100 organizations between May 27 and June 9, according to a blog post from Google Threat Intelligence Group and the cybersecurity firm Mandiant. About 68 percent of those organizations are colleges or universities, and most are based in the U.S. Oracle sent out a security alert on June 10 but did not say whether any of its users had been breached.
“While several organizations successfully blocked the activity or remediated the vulnerabilities, others experienced compromise, resulting in stolen data being published on the ShinyHunters DLS,” the blog post stated.
The University of Nottingham in England confirmed it was part of the data breach, Higher Ed Dive reported. In an email to students, university officials said they were working to determine what data had been accessed.
IU Professor Investigated for Graphic About White Supremacy Loses Job
Intl. Students Still in Limbo, Even With USCIS Pause Over
6 Reasons Libraries Should Look Beyond the M.L.S. (opinion)
Colleges Backtrack on Pride Month
IU Professor Investigated for Graphic About White Supremacy Loses Job
Cited Professors Say the Vanderbilt Report Misrepresents Their Work