Thursday, 06 August 2026
The university is aware of reports that some individuals may be receiving communications from persons claiming to hold personal data relating to the recent cyber security incident and seeking payment. At present, we are investigating these reports and assessing their scale and nature.
Criminals sending phishing emails often make claims that they have access to additional personal information about you. This is a common tactic designed to create concern, increase a sense of urgency, and persuade people to respond or make a payment.
The fact that someone claims to hold personal data does not necessarily mean that they possess additional information.
If you receive a message of this nature, we strongly recommend that you:
- Do not make any payment.
- Do not reply to the message.
- Do not click on any links or download any attachments.
- Retain a copy of the communication where possible (for example, a screenshot or copy of the message).
- Report the communication to the university via DPO@nottingham.ac.uk and provide a copy if you are able to do so.
The information you provide will assist the university in understanding the nature and extent of this activity.
If you are concerned about the impact of this incident on your personal circumstances or wellbeing, students can seek support through the university's student welfare or staff wellbeing services, as appropriate.
If you believe you have been the victim of a crime, you may also wish to report the matter to Action Fraud via or by telephone on 0300 123 2040.
We take these reports extremely seriously and are working with the police and other relevant authorities as part of our ongoing response. If you are concerned about any of the emails you have received and would like to speak to someone, please don't hesitate to contact our wellbeing team via .