University of Guelma: seminar system compromised via SQL injection

<p>On 17 May 2026, a forum user claims to have obtained access to data belonging to <strong>University of Guelma</strong>, Algeria on a hacking forum. The claimed data includes user credentials, personal information. A limited sample was published to support the claim.</p> <h2>What the source reveals</h2> <p>An actor claims to have exploited a SQL injection vulnerability in the seminar management application of the University of Guelma, Algeria, gaining access to user data.</p> <h2>Risks</h2> <ul> <li>Targeting of students and academic staff for phishing or social engineering using institutional data</li> <li>Academic fraud if grade records, transcripts, or certification data were compromised or altered</li> <li>Long-term identity risks for students whose personal data may circulate for years after graduation</li> <li>Unauthorised access to sensitive organisational data that could be used for follow-on attacks</li> <li>Competitive intelligence loss if proprietary business information or trade secrets were exposed</li> <li>Reputational damage and erosion of customer, citizen, or stakeholder trust in the affected organisation</li> <li>Legal liability and regulatory fines under applicable data protection frameworks</li> </ul> <h2>What remains unknown</h2> <ul> <li>the total volume of data compromised and whether it includes additional categories beyond those disclosed</li> <li>the method by which the data was obtained - whether through a direct database compromise, an insecure API, or a third-party breach</li> <li>whether the data has been sold or distributed to additional parties beyond the forum post</li> </ul> <h2>Conclusion</h2> <p>While the claim has not been independently verified, the potential exposure of data from University of Guelma warrants attention. Students and staff whose data may have been exposed should change passwords on institutional and personal accounts and remain alert to phishing attempts referencing the university.</p>