Statement on potential unauthorised data access Published on: 30 July 2026 Information about a potential unauthorised data access. We are aware of reports circulating online that, along with a number of other organisations, we have been targeted by an unauthorised data access. Our teams are actively investigating these reports as a priority. The affected information is limited to contact information, including names, addresses, email addresses and telephone numbers. We continue to monitor the situation closely and have the appropriate controls and protections in place. We will provide a further update when we are able to confirm more information. What has happened? We were alerted to a potential unauthorised access of data on the morning of Monday 27 July 2026. Our subsequent investigation identified a configuration issue affecting a connection to one of our admissions systems that enabled unauthorised access to some limited contact information in our database. That access has now been removed. Has the University been hacked? We believe there has been unauthorised access to some personal data through a specific technical vulnerability, which has now been resolved. At this stage, there is no evidence of broader compromise of our systems or infrastructure. We have found no evidence of ransomware, malware deployment or wider system compromise. What information was accessed? The affected information is limited to contact information, including names, addresses, email addresses and telephone numbers. It does not contain any admissions-related or exam results data. Is the attack ongoing? No. We identified the technical issue that enabled the access and have corrected the configuration to prevent further access. We continue to monitor our environment for any further suspicious activity. What are you doing now? We are continuing forensic investigations with specialist security partners and assessing our regulatory obligations. Were other organisations affected? Our understanding is that other organisations have also been targeted by the same criminal group. We continue to work with partners as investigations progress. Have you reported the incident to the ICO? Yes. I’m worried about my data, what should I do? You do not need to take any action. If your data has been affected, you might receive scam emails, calls or texts claiming to be from Âé¶¹´«Ã½ when they are not. Remember, we will never contact you to ask you to provide us with any passwords or payments by phone or email. The offers guidance on how to spot and report scam emails, texts, and phone calls. They also have to help protect yourself online.The Information Commissioner’s Office has guidance to support you if you are concerned about how your information might be shared. Further information about how Âé¶¹´«Ã½ processes personal data, your rights under data protection legislation, and how to raise a concern can be found on the University's Data Protection webpages. Updated: 14:40 04.08.2026 Latest News Local knowledge can improve early warnings of glacial lake floods Local knowledge, improved evacuation preparedness and resilient mobile phone-based communication channels can enhance Early Warning Systems to reduce loss of life during glacial lake outburst floods. published on: 3 August 2026 Funding boost moves landmark cancer research centre a step closer A £1.25 million grant from the Wolfson Foundation to Âé¶¹´«Ã½ has brought the Sir Bobby Robson Institute a significant step closer, giving a major boost to its fundraising campaign. published on: 3 August 2026 Statement on potential unauthorised data access Information about a potential unauthorised data access. published on: 30 July 2026 Facts and figures