Scotland's university procurement center confirms cybercrooks broke in
Jump to main content
Search
REG AD
cyber-crime
Scotland's university procurement center confirms cybercrooks broke in
APUC investigating after criminals claim historical data theft
Connor Jones
Connor<br>Jones
Cybersecurity reporter
Published<br>fri 31 Jul 2026 // 11:45 UTC
Advanced Procurement for Universities and Colleges (APUC) says attackers gained unauthorized access to historical data in a cyberattack earlier this month.<br>The Scottish education procurement body said it immediately contained the mid-July intrusion and was investigating claims that some of the data had been stolen.<br>"We recently discovered suspicious activity on our IT systems involving unauthorized access to certain historic data," an APUC spokesperson told The Register. "We took immediate action to contain the incident and are investigating the scope of it, working alongside external technical specialists. There has been no operational disruption to our day-to-day activities.
REG AD
"We are aware that the group responsible for the unauthorized access has claimed to have taken some historic data from our systems. We are investigating this as a matter of priority. We have notified the relevant authorities and will continue to cooperate with them."
REG AD
APUC is Scotland's procurement center of expertise for universities and colleges, and one of eight members of UK Universities Purchasing Consortia (UKUPC).<br>These organizations negotiate agreements with approved suppliers, allowing member institutions to buy goods and services without running a separate procurement exercise each time.<br>APUC arranges these deals as Framework Agreements – pre-vetted terms under which Scottish universities and colleges can place orders with approved suppliers.
MORE CONTEXT
Pass the key, passwords have passed their sell-by date
Home Office hands £28M to immigration IT incumbents after procurement challenge
UK to rethink tech buying after Palantir contracts
Greedy ransomware crews return for seconds after victims cough up first extortion payments
The organization lists hundreds of Framework Agreements covering contracts collectively worth hundreds of millions of pounds.<br>APUC confirmed the attack after sources approached The Register with information about the incident.<br>Those sources claimed APUC received an extortion demand from the criminals behind the intrusion, although we have not independently confirmed that detail.<br>The Register understands that the crooks claimed to have stolen APUC data dating back 20 years, and gained admin access through an employee account.<br>We asked APUC about these claims, whether ransomware was involved, and whether it could identify any inaccuracies in the information we received. The spokesperson did not address those questions.
REG AD
At the time of writing, APUC did not appear on any of the major ransomware or extortion groups' data leak sites. ®
cyber-crime
REG AD
Unexpected item in the bagging area as Windows Activation error pops up at check-in
Bags weighed down by a Microsoft license key
SYSTEMS
A deep dive into Nvidia's Vera CPU and the Olympus cores that power it
88 custom cores, 176 funky threads, 1.5 TB of laptop RAM, and 1.8 TB/s of NVLink connectivity — this isn't your typical datacenter chip
From individual achievement to partner impact
PARTNER CONTENT: Databricks survey data suggests certified professionals lift partner delivery capacity, customer credibility, and AI readiness well beyond the individuals who earn the credential
OFF-PREM
Enterprise cloud infrastructure uptake shows no sign of slowing
Cloud revenue now north of $143 billion a quarter, and growth is accelerating
PAAS AND IAAS
Amazon's Q2 was great, but the earnings release is packed with baloney
"Tell me lies, tell me sweet little lies"
DEVOPS
Dev who gave HashiCorp its name returns with a faster terminal multiplexer
Persistent sessions could be just the beginning
MOST POPULAR
security
DEF CON bans Meta-style 'pervert glasses'
software
Techie lured out of retirement to support software only he remembered
security
Word worm crawls into Copilot, spreads chaos
DATABASES
After rewriting SQLite in Rust, Turso turns its sights on Postgres
AI and ML
Closed models refuse to help researcher swat Linux bug
AI
SYSTEMS
A deep dive into Nvidia's Vera CPU and the Olympus cores that power it
88 custom cores, 176 funky threads, 1.5 TB of laptop RAM, and 1.8 TB/s of NVLink connectivity — this isn't your typical datacenter chip
OFF-PREM
Enterprise cloud infrastructure uptake shows no sign of slowing
Cloud revenue now north of $143 billion a quarter, and growth is accelerating
DEVOPS
Dev who gave HashiCorp its name returns with a faster terminal multiplexer
Persistent sessions could be just the beginning
SECURITY
Anthropic and OpenAI are competing to see whose agents can go rogue harder
Whoever wins, we lose
SYSTEMS
UK wants datacenters to...