University of Tlemcen: student PII files leaked

<p>On 27 October 2025, a forum user claims to offer for sale data belonging to <strong>Universite de Tlemcen (univ-tlemcen.dz)</strong>, Algeria on a hacking forum. The claimed data includes student personal information. A limited sample was published to support the claim.</p> <h2>What the source reveals</h2> <p>A forum user offered PDF files containing personal information of students of the University of Tlemcen, Algeria.</p> <h2>Risks</h2> <ul> <li>Targeting of students and academic staff for phishing or social engineering using institutional data</li> <li>Academic fraud if grade records, transcripts, or certification data were compromised or altered</li> <li>Long-term identity risks for students whose personal data may circulate for years after graduation</li> <li>Unauthorised access to sensitive organisational data that could be used for follow-on attacks</li> <li>Competitive intelligence loss if proprietary business information or trade secrets were exposed</li> <li>Reputational damage and erosion of customer, citizen, or stakeholder trust in the affected organisation</li> <li>Legal liability and regulatory fines under applicable data protection frameworks</li> </ul> <h2>What remains unknown</h2> <ul> <li>the total volume of data compromised and whether it includes additional categories beyond those disclosed</li> <li>the method by which the data was obtained - whether through a direct database compromise, an insecure API, or a third-party breach</li> <li>whether the data has been sold or distributed to additional parties beyond the forum post</li> </ul> <h2>Conclusion</h2> <p>While the claim has not been independently verified, the potential exposure of data from Universite de Tlemcen (univ-tlemcen.dz) warrants attention. Students and staff whose data may have been exposed should change passwords on institutional and personal accounts and remain alert to phishing attempts referencing the university.</p>