leak
Credible
Egypt (EG)
education
Egypt Ain Shams University: 563,000 Student Records with IDs and Emails Leaked
Ain Shams University Egypt
CompanyAin Shams University Egypt
CountryEgypt (EG)
Sectoreducation
Breach date2026-04-02
People affected563,000
Data typesNot disclosed
<p>On 02 April 2026, a forum user published to have obtained access to data belonging to <strong>Ain Shams University Egypt</strong>, Egypt on a hacking forum. The claimed dataset contains approximately <strong>563,000</strong> records. Sample data was published alongside the claim, providing corroborating evidence of the breach.</p>
<h2>Risks</h2>
<ul>
<li>Targeted phishing campaigns using compromised email addresses to distribute malware or harvest credentials from employees and customers</li>
<li>Identity theft and impersonation using exposed personal identification documents and biometric data</li>
<li>Targeting of students and academic staff for phishing or social engineering using institutional data</li>
<li>Academic fraud if grade records, transcripts, or certification data were compromised or altered</li>
<li>Long-term identity risks for students whose personal data may circulate for years after graduation</li>
<li>Reputational damage and erosion of customer, citizen, or stakeholder trust in the affected organisation</li>
<li>Legal liability and regulatory fines under applicable data protection frameworks</li>
</ul>
<h2>What remains unknown</h2>
<ul>
<li>the total volume of data compromised and whether it includes additional categories beyond those disclosed</li>
<li>the method by which the data was obtained - whether through a direct database compromise, an insecure API, or a third-party breach</li>
<li>whether the data has been sold or distributed to additional parties beyond the forum post</li>
</ul>
<h2>Conclusion</h2>
<p>This incident confirms that Ain Shams University Egypt's data has been compromised and is circulating on underground forums. Students and staff whose data may have been exposed should change passwords on institutional and personal accounts and remain alert to phishing attempts referencing the university.</p>