UGC Data Breach Exposes Personal Details of 130,000 Students, 3,000 Professors

Kathmandu. A major cybersecurity vulnerability at the University Grants Commission (UGC) has exposed sensitive personal and financial data of thousands of students and professors, raising serious concerns over data protection and digital governance in Nepal.

The breach, linked to weaknesses in the commission’s system developed by Debug Soft, reportedly stemmed from inadequate API authorization and authentication mechanisms. As a result, personal details of around 130,000 students and nearly 3,000 faculty members were accessible online without any security safeguards.