University of Nottingham
On a school or workplace learning platform, the institution bought the system and you were never the customer, so deletion is its call and a request to the vendor is usually sent back to it. The main record stays long after you have gone, with no period named.
Reported incidents
Records of 454,600 students and alumni taken from its student system
2026-06-10Affected Campus Solutions student records platform
The University of Nottingham found unauthorised activity in its Campus Solutions student records platform on 9 June 2026 and emailed affected students and alumni on 10 June. The university says the attacker used a flaw in Oracle WebLogic. The ShinyHunters group claimed the attack and published the data. Have I Been Pwned counted 454,600 people. The data includes names, addresses, phone numbers, dates of birth, ethnicity, disability, passport numbers and fee payment records. The university reported the incident to the ICO and says it received no direct ransom demand.
People affected typically ask University of Nottingham to confirm whether their information was included, and which categories.
The verified route
DÆTRAX is a personal data accountability ledger: a dated record of which companies hold your personal data, what you asked them to do about it, and what they claimed in reply.