The University of Nottingham has confirmed a cyberattack in which threat actors gained unauthorized access to and exfiltrated personal data belonging to more than 450,000 current and former students; the data was subsequently leaked publicly. The breach affects a large population of individuals whose records were held by the university, creating immediate notification obligations and sustained reputational exposure. While the specific attack vector remains undisclosed, the confirmed public leak elevates regulatory and litigation risk significantly.