Hassiba Ben Bouali University Chlef Systems Compromised, Login Files Leaked

Overview

On 4 October 2025, a DarkForums user announced the compromise of the website of Hassiba Ben Bouali University of Chlef in Algeria. The post, published by the Dark Hell 07x team with collaborators Jokeir 07x and Dr. Shell 08x, claims that all access points and backend servers were compromised. A downloadable archive with login files was provided.

What was published

The post claims the extraction of:

• Login files for all sub-sites of the university
• Faculty accounts and student accounts
• Backend server access details

The archive was shared on a file hosting service with the password dark07x. The university structure mentioned in the post includes 9 faculties and institutes, more than 75 business administration (LMD) majors and approximately 112 master's degree programs. The post also exposes a list of university email addresses.

Risks for affected individuals

• Student and faculty accounts can be used for credential-stuffing attacks on other services.
• Exposed institutional emails enable targeted phishing against academic staff.
• Backend access claims raise the risk of manipulation of academic records.

What remains unknown

• The exact number of accounts contained in the archive.
• Whether passwords were stored in plain text or hashed.
• Whether the university has confirmed or remediated the incident.

What affected people should do

Students and staff of Hassiba Ben Bouali University should change their university passwords and any reused passwords, enable two-factor authentication where offered, and report suspicious messages referencing university systems.