Newcastle University
On a school or workplace learning platform, the institution bought the system and you were never the customer, so deletion is its call and a request to the vendor is usually sent back to it. The main record stays long after you have gone, with no period named.
Reported incidents
Applicants' and students' contact details taken from an admissions system
2026-07-30Affected Admissions system
Newcastle University said on 30 July 2026 that a configuration flaw in a connection to one of its admissions systems had let an outsider reach personal information. It found the access on 27 July, stopped it and reported the incident to the Information Commissioner's Office. The university said the data was limited to names, addresses, email addresses and telephone numbers, with no admissions records or exam results taken. A group calling itself ExfilSquad claimed about 440,000 records. The university has not given a number and said other organisations were targeted by the same group.
People affected typically ask Newcastle University to confirm whether their information was included, and which categories.
The verified route
DÆTRAX is a personal data accountability ledger: a dated record of which companies hold your personal data, what you asked them to do about it, and what they claimed in reply.