A threat actor using the alias namolesa has posted what they claim is a database of about 20,000 students from Helwan University in Egypt. Shared on a dark web forum, the listing states that the data was obtained from helwan.edu.eg, the university’s official domain.
According to the post, the dump is roughly 3.1MB in size, in CSV format, and includes:
- First, last, and third names
- Phone numbers and emails
- Specializations
- Student IDs and personal IDs
A Telegram link was also provided for downloading the dataset. If legitimate, this leak exposes thousands of Egyptian students to risks such as targeted phishing, scams, or identity theft. It also highlights how universities that often manage large volumes of personal data remain prime targets for cybercriminals.