2026 University of Oxford — Group GTI CareerConnect platform breach (third-party careers site)
Data compromised
First names, last names, email addresses, encrypted CareerConnect passwords for non-SSO users
Technical writeup
The University of Oxford disclosed in June 2026 that third-party vendor Group GTI reported its CareerConnect careers platform was breached on May 28, 2026. Attackers accessed users’ first and last names, email addresses, and encrypted passwords for accounts not using SSO; GTI invalidated local passwords. Oxford stated university systems were not compromised and that course files, appointments, and financial data were not involved. The institution warned alumni, staff, students, and employer users about phishing risk; victim totals were not published.
Root cause
Third-party CareerConnect platform compromise (Group GTI); Oxford systems not directly breached