Universitas Islam Depok · Breach

Threat actor claims sale of 3,549 Universitas Islam Depok student records

Oct 26, 2026 · 1 min read

A threat actor on an underground forum claims to sell a database of 3,549 student records from Universitas Islam Depok (UID), Indonesia, with a 100-line sample offered to buyers. Alleged fields include NIK (national ID), NISN, names, addresses, phone numbers, and emails; DailyDarkWeb, which reported the case, says the claim has not been verified. Students should watch for scams and misuse of the NIK.

By HIFY Radar newsroom Updated 10/26/2026 03:54 PM Get this every day →← Back to the feed 1 source

MediumBreachNo software to update

In this article

What happened
Why it matters
What to do
For the technical team
Timeline
Sources

What happened

A threat actor on an underground forum claims to sell a database with 3,549 student records from Universitas Islam Depok (UID), Indonesia. The offer includes a 100-line sample for buyers. DailyDarkWeb, which reported the case, says the claim has not been independently verified.

Why it matters

If authentic, the data includes NIK (national ID), full names, addresses, phone numbers, and emails, enabling identity fraud and scams against students and their families. Organizations holding similar student data face the same exposure on the underground market.

What to do

Warn students about phone and email scams and monitor for misuse of the NIK. Seek confirmation through your own channels before treating this as a confirmed breach.

For the technical team

Affected: Universitas Islam Depok (UID), Indonésia; banco de dados de estudantes, segundo alegação · Universitas Islam Depok (UID), Indonesia; student database, per the claim.
Exploitation: Alleged sale on an underground forum, reported by DailyDarkWeb, with a 100-line sample offered to buyers. Claim not independently verified.
Fix: Not applicable; the sources indicate no fix.
More details: Alleged fields: student IDs, full names, gender, NIK, NISN, place and date of birth, home address components, mother's name, phone numbers, email addresses, and prior school details. DailyDarkWeb states sample rows are redacted from its images. Its analyst note rates the data as high-sensitivity PII if authentic, supporting identity fraud and social engineering against families. How the data was obtained is not disclosed.