---
title: Uninter Investigates Alleged Hacker Attack Exposing Terabytes of Student Data
url: https://www.dataloco.com/en/uninter-investigates-alleged-hacker-attack-exposing-terabytes-of-student-data
published: 2026-10-25T13:20:47+00:00
language: en
section: Security
source: https://www.estadao.com.br/tecmundo/ciberseguranca/uninter-investiga-possivel-vazamento-de-734-tb-de-dados-em-ataque-hacker/
organizations: Uninter, TecMundo, OWASP
publisher: Dataloco
---

# Uninter Investigates Alleged Hacker Attack Exposing Terabytes of Student Data

The International University Center, known as Uninter, is currently investigating a suspected security breach involving the potential exposure of massive amounts of sensitive data following a hacker attack. The institution has confirmed that it is looking into the incident and has notified the relevant authorities, although it has not yet verified the total volume of data affected or the specific number of individuals impacted by the event. This investigation comes after claims surfaced that personal files belonging to students and staff were stolen from the university systems and are now being offered for sale on an illegal online forum.

Criminals claiming responsibility for the intrusion allege that the total size of the stolen data reaches approximately 7.34 terabytes. These actors state that at least two million users could have been exposed in this breach. The files reportedly include a wide range of sensitive documents such as identity cards, academic diplomas, marriage certificates, and complete school history records. While the university has not confirmed these figures, the sheer scale of the alleged theft would place this incident among the largest digital breaches ever recorded in the country if the claims prove to be accurate.

Independent analysis of a public sample of the leaked material reveals that the data is organized into thirteen folders containing thousands of personal files. The examined sample, which was made available on a messaging platform, totals nearly two gigabytes when fully uncompressed. The files within this sample are named in Portuguese and lack any form of encryption or protective layers, making them easily accessible to anyone who obtains them. The content appears to consist of scanned images and documents that were likely uploaded during online enrollment processes, yet no master list or index of affected users was found within the sampled data.

The attackers, communicating under a specific alias, told reporters that the breach originated from a subdomain known as the Candidate Portal. They attribute the success of their operation to a security vulnerability classified as Broken Access Control. This type of flaw occurs when a system fails to properly restrict the actions that users, whether authenticated or not, are permitted to perform. In simple terms, this weakness could allow an individual to access information belonging to others or even obtain administrative privileges simply by modifying specific data within a web link, bypassing standard security checks.

This specific category of security failure currently holds the top position in a widely recognized ranking of web application risks maintained by a global open security foundation. The list serves as a guide for software developers and security researchers to identify the most common and critical flaws found in internet services. While the explanation provided by the hackers offers a technical narrative for how the data was extracted, the university has not independently confirmed that this specific vulnerability was the cause of the incident, nor has it validated the methods described by the perpetrators.

The alleged total volume of 7.34 terabytes represents a significant amount of digital storage, equivalent to roughly seven thousand gigabytes. To put this magnitude into perspective, storing such a quantity of files would require the combined capacity of approximately thirty modern smartphones with standard storage configurations. If the claim that the breach involves over seven million individual files is verified, it would demonstrate a substantial extraction capability by the tools used during the attack. However, the total data size does not necessarily correlate directly to the number of unique individuals exposed, as large files can inflate the overall volume without increasing the victim count.

Further examination of the leaked files indicates that they retain embedded metadata, which includes extra information such as the date of creation and the specific device used to capture the images or scans. The absence of post-processing techniques, such as individual file compression, helps explain why the total size of the alleged leak is so large. The university maintains a student body of nearly three-quarters of a million individuals across its undergraduate and postgraduate programs, making the potential exposure of their records a matter of significant concern. Authorities continue to review the case as the institution works to determine the full extent of the compromise.

## This story in other languages

- [ไทย](https://www.dataloco.com/th/story-76)
- [Deutsch](https://www.dataloco.com/de/uninter-untersucht-moglichen-datenverlust-von-734-tb-durch-hackerangriff)
- [Français](https://www.dataloco.com/fr/uninter-enquete-sur-un-possible-vazement-de-734-to-de-donnees-dans-une-attaque-de-hacker)