The alleged database of Kashmir University students has been put on sale for just $250 on a hacking forum by “ViktorLustig”. The name is inspired by the infamous con artist who “sold” the Eiffel Tower, not once but twice.
The threat actor has shared a database index to show the data he has in his possession.
As per the report, It claims to include student information, registration number, phone number, email address, password, employee data and more. However, as per the latest update, the thread has been deleted from the hacking forum. But the profile of threat actor “VictorLustig” is still active on the forum.
The breach was spotted by a Twitter user Abhishek Verma who received a confirmation from the admin of the forum “pompompurin”, who said that the alleged database is legitimate.
Pertinently, the database is listed on Breached Forums, the famous hacking forum that gained international attention earlier this month with a data breach exposing over 1 billion Chinese residents. As per Abhishek,who has also shared the screenshots of the hacked data being put on sale on the platform, the hacker has shared a txt file named “dbs.txt” showing an index of the hacked data.
Meanwhile Kashmir University in a statement said that the varsity data was “unmodified and that further analysis is going on in the matter.”
“The alleged breach is being analyzed and as per the preliminary analysis it has been found that the data is unmodified,” a Kashmir University spokesperson said in a statement.
“Any breach on data read (which is already accessible in public domain) is being analyzed in-depth and depending upon the analysis, University will take further course of action and take an appropriate legal recourse accordingly,” the spokesperson said.
