563k Records from Ain Shams University Portal Leaked

Overview

On 2 April 2026, a DarkForums user shared a dataset described as originating from ums.asu.edu.eg, the university management system portal of Ain Shams University in Egypt. The post describes approximately 563,000 records organized across contacts, student enrollments and student authentications.

What was published

The dataset is organized in three main sections:

• Contacts: student and prospective student information including first, middle and last names, gender, birth date components, nationality, email, phone and mobile numbers
• Student Enrollments: enrollment records
• Student Authentications: authentication-related records

Field headers shown in the post include contact_id, tribal_name, english_name, birth_year, birth_month, birth_day, nationality, email_address, phone_number and mobile.

Risks for affected individuals

• Student contact data enables targeted phishing and academic fraud.
• Birth dates and nationality details support identity fraud.
• Authentication records may reveal account usage patterns.

What remains unknown

• The exact record count per section.
• Whether authentication records include credentials or tokens.
• Whether the university has acknowledged the exposure.

What affected people should do

Students of Ain Shams University should monitor their accounts, change passwords if they suspect compromise, and be cautious of messages referencing their enrollment records.