The University of Manchester said it suffered a significant cyber attack that may have compromised the sensitive personal information of its staff and students.

The University said in a cyber incident statement posted on its website on 9th June that it identified a cyber security incident during the week commencing 6 June that involved a threat actor gaining unauthorised access to some of its internal systems and “data have likely been copied.”

“Our in-house experts and established expert external support are working around the clock to resolve this incident.

“We are working to understand what data have been accessed and will update you as more information becomes available,” said Registrar, Secretary, and Chief Operating Officer of Manchester University, Patrick Hackett.

The University of Manchester also said that it has notified all relevant authorities, including the Information Commissioner’s Office, the National Cyber Security Centre (NCSC), the National Crime Agency and other regulatory bodies and is working with them to resolve the situation.

The University has confirmed that it so far has “no indicators to believe that this incident is the work of the same or associated perpetrators of the hacks at MoveIT and Zellis.”

“We know this will cause concern to members of our community and we are very sorry for this. Our priority is to resolve this issue and provide information to those affected as soon as we are able to, and we are focusing all available resources,” Hackett added.

The University has urged all individuals associated with the institution to be vigilant about any suspicious phishing emails. It has also shared FAQs and best practices in the notice for all concerned individuals.

Commenting on the news, VP of EMEA at SonicWall, Spencer Starkey said, “It is clear that not only has this sector seen an increase in cyberattacks, but hackers are increasingly using varied methods to gain unlawful access. Ransomware remains a major threat, as it has the ability to completely shut a school down, a vital source for many, further increasing the chance of payout.

“But other forms are gaining popularity, as more see this sector as underequipped, underprepared and ready to overpay. Encrypted attacks in 2022 spiked 411 per cent and the number of IoT malware attacks rose 146 per cent. IoT malware is when hackers target a device such as sensors, gadgets or appliances, with malicious software designed to gain access and damage your device,” Starkey added.