University of Texas at Arlington Confirms data theft but withholds what was taken

University of Texas at Arlington serves more than 41,000 undergraduate and post-graduate students. Hackers breached University of Texas at Arlington systems and stole personal information from students and employees during a cybersecurity incident last month, according to a university warning. A university spokesperson speaking to Recorded Future News said investigators confirmed data theft but declined to name what threat actors obtained. “We are working to determine whose information may have been involved and the nature and extent of the information accessed,” the spokesperson said.

When the attack was first announced, the university took down MachForms. MachForms handles event registration, service requests and surveys. MachForms remains offline, and the university is monitoring for further effects on systems or operations. Once the university identifies affected individuals, it will contact them directly about the incident, protective steps and support.

The Qilin ransomware cartel claimed responsibility for the University of Texas at Arlington attack this week. Halcyon Ransomware Research Center said Qilin was behind 344 alleged attacks from July through September 2026, the second-highest count of any group.

The group recently claimed credit for an intrusion at the Bureau of Alcohol, Tobacco, Firearms and Explosives. Authorities arrested a leading Qilin affiliate in Japan and sent the person to Germany.

York University said hackers stole student information going back more than ten years during a recent cybersecurity incident. The university discovered the unauthorized access on October 25. Forms on 14 York University websites from 2007 through 2026 were affected by the breach.

The university said most stolen records included basic contact details and York ID numbers. The university also disclosed that exposed data included e-mail addresses, phone numbers, dates of birth and health information.

“While York acted quickly to contain the incident following discovery, we regret to confirm the theft of personal information from some departmental forms,” York University said. York will directly notify people whose government ID or financial account data the breach exposed and offer two years of credit monitoring and identity theft protection, though it has not specified how many individuals the breach affected.

Multiple universities are currently coping with ransomware attack fallout, including University of Texas at Arlington. Last week, hackers attacked Vanderbilt University and disclosed that returning every system to normal will likely take weeks. Payroll and payment services are Vanderbilt’s priority.