Universitatea Politehnica din Bucuresti Listed by Fog Ransomware Group

On February 9, 2025, the Romanian university Universitatea Politehnica din Bucuresti appeared on the leak site of the fog ransomware group. Internal files were allegedly exfiltrated during a ransomware attack, joining two other organizations — Maxvy Technologies Pvt and iRidge Inc — in the same posting. While the exact number of people whose information may have been exposed remains unknown, anyone connected to the university — students, alumni, staff, or their families — may now find personal details circulating on dark-web forums.

What Public Reporting Shows

Public reporting indicates the university was listed on the fog ransomware group’s leak site on February 9, 2025. The posting claims that internal files were stolen before encryption occurred. Available reporting describes the data as internal documents rather than a structured database of student records, though the precise contents have not been independently verified by third parties. The fog group published the listing alongside two private companies, suggesting the incidents are part of the same campaign wave.

Why This Matters for You and Your Family

When a university is hit, the ripple effects reach far beyond campus. Current and former students, faculty, and administrative staff often have their contact details, dates of birth, addresses, or even family member information stored in shared drives and internal systems. If those files reached the attackers, pieces of your identity or your children’s information could already be for sale. Credential leaks like this one frequently cascade into gaming accounts, email takeovers, and further doxxing attempts that affect the entire household.

The Doxxing and Identity-Chain Risk

Ransomware operators rarely stop at dumping one set of files. Once initial data appears, other criminals scrape it, link usernames across platforms, and build detailed profiles. A university email address found in the leak can be tested against gaming services, social media, and family-shared accounts. Children’s gaming handles are especially vulnerable because young users often reuse simple passwords or email addresses tied to a parent’s university records. The result is an identity chain that can lead to harassment, account takeovers, or targeted scams against you or your family.