Threat watch / Breach
University of Texas at Arlington: personal data stolen in an October intrusion, forms portal still offline
The University of Texas at Arlington, which serves more than 41,000 students, warned students and employees that personal information was stolen by hackers who breached its systems in October 2026. A spokesperson told The Record that the investigation confirmed the stolen data, but declined to say what was taken. The university took down MachForms, the online portal it uses for event registrations, service requests and surveys, which is still offline. The Qilin ransomware gang claimed the attack; the university has not confirmed that claim.
- Sector
- Education
- Way in
- Not public yet
- Product or vendor
- None named
- How it happened
- Not public yet Checked 14 Nov 2026
- What was stolen
- Personal information of students and employees. A spokesperson says the investigation confirmed the stolen data but declined to say what information was taken.[1] Checked 14 Nov 2026
- Who was impacted
- Students and employees of the university, which serves more than 41,000 students. The university says it is "working to determine whose information may have been involved" and has not given a number. Users of its MachForms portal (event registrations, prospective-student inquiries, service requests and surveys) lost the service.[1][2] Checked 14 Nov 2026
- Threat actor
- Not attributed
Timeline
- MachForms, the university's online forms service, becomes "temporarily unavailable", according to the university's cybersecurity website as cited by The Cyber Express. [2]
- The Cyber Express reports that the university is investigating a cybersecurity incident that "may have involved unauthorized activity in some of its information technology systems" and is still working out whether it spread to other systems. [2]
- The university warns students and employees that personal information was stolen. A spokesperson tells The Record the investigation "confirmed the stolen data" and that MachForms stays offline. The Qilin ransomware gang claimed the attack this week, a claim the university has not confirmed. [1]