Qilin claims attack on Spanish online university UDIMA
The Qilin ransomware gang listed UDIMA (Universidad a Distancia de Madrid), which describes itself as Spain's first private online university, on its leak site on Oct 29, 2026. No details on the volume or type of data allegedly taken have been shared, and UDIMA has not publicly confirmed a cyber incident. If the claim holds, students and staff should watch for targeted phishing and impersonation attempts.
What happened
The Qilin ransomware gang listed UDIMA, a private distance-learning university in Madrid, on its leak site on Oct 29, 2026. No details on the volume or type of data allegedly taken have been shared. The university has not confirmed the incident, and the claim has not been independently verified, according to DailyDarkWeb.
Why it matters
Online universities hold large volumes of student identity, academic, and payment records. If the claim holds, students and staff may face targeted phishing and impersonation attempts. The situation creates fraud risk and trust damage for users of the institution's services.
What to do
Monitor UDIMA's official channels for confirmation or guidance. Review access logs and internal systems for anomalous activity. Prepare communications for students and staff about targeted phishing.
For the technical team
- Affected
- Rede de TI da UDIMA (Universidad a Distancia de Madrid), autodescrita como primeira universidade privada online da Espan · UDIMA (Universidad a Distancia de Madrid) IT network. University founded in 2006 and based in Collado Villalba, Madrid; describes itself as Spain's first private online university, offering degree, master's, and doctoral programs.
- Exploitation
- Data theft claim by the Qilin ransomware gang, with no technical details released. The listing appeared on the gang's leak site on Oct 29, 2026 (UTC), reported by DailyDarkWeb. Claim not independently verified; UDIMA has not publicly confirmed a cyber incident.
- Fix
- No software fix applicable (alleged breach, not a vulnerability). Analyst-recommended mitigation: monitor for official confirmation and warn students and staff about targeted phishing and impersonation.
- More details
- Attributed group: Qilin (ransomware). Alleged victim: UDIMA. Single source: DailyDarkWeb, whose analyst note classifies the case as an unverified threat-actor claim, not confirmation of a breach. The analyst note highlights that online universities hold large volumes of student identity, academic, and payment records.
Timeline
Incident opened.
Sources 1 source
- @DailyDarkWeb @DailyDarkWeb
