Lagos State University staff and student data shared on DarkForums

Overview

On 18 April 2026, a DarkForums user using the handle NullsecNg shared data attributed to LASU DBS, the database system of Lagos State University in Nigeria. The post describes the contents as staff names, lecturer names with Gmail addresses and phone numbers, and student matriculation numbers.

What was published

The thread lists the categories of exposed data and provides a download link on a file-sharing service. No record count was given, and the poster did not specify how the data was obtained.

Risks for affected individuals

• Matriculation numbers combined with names can be used to impersonate students in official requests.
• Lecturer contact details can feed targeted phishing during registration or fee periods.

What remains unknown

• The total number of staff and students affected.
• Whether the data comes from a public scrape or an internal system.
• Whether additional fields such as grades or financial records are included.

What affected people should do

Students and staff of Lagos State University should treat unsolicited messages referencing their matric numbers or university emails as suspicious. The university should investigate the origin of the data and issue guidance to its community.