Ransomware group DYSPHOR1A reportedly listed DU as a victim on August 21, 2026; the claim is unverified, DU hasn’t commented, and the listing has since vanished from Ransomware.live’s tracker.
The University of Delhi (DU) has reportedly been hit by a ransomware group calling itself DYSPHOR1A, according to an incident report sourced from Ransomware.live via the cybersecurity platform HookPhish. The report dated the breach and its discovery to August 21, 2026, at 02:20 IST, and listed DU under the education sector in the India region.
The listing described DU using standard identifying details—its founding year, academic scope, and status as one of India’s most prominent public universities. Ransomware.live, which tracks postings by ransomware groups on leak sites, had flagged DYSPHOR1A as an “emerging group” at the time, cautioning that claims from newer threat actors should be treated with caution until independently verified.
The University of Delhi has not issued any statement confirming or denying the incident. Infosecurity Magazine’s July 2026 report pointed to a sharp rise in ransomware attacks on higher education globally in the first half of the year, driven in part by newer, less-established groups entering the space. Indian institutions have not been exempt from this trend, with several universities and research bodies appearing on leak-site trackers over the past year.
If confirmed, DU would be the latest in a string of Indian educational and research institutions targeted by ransomware groups this year, a trend consistent with a broader global rise in ransomware attacks on the higher education sector through 2026.
The original listing on Ransomware.live has since returned a “page not found” error, and DU no longer appears on the platform’s current list of Indian ransomware victims. The reason for its disappearance is unclear; it could indicate a retracted or unsubstantiated claim, a technical change on the tracker’s end, or another resolution, none of which can be confirmed at this time.
Image Source: ransomware.live
Image Caption: Screenshot from ransomware.live link, which originally targeted Delhi University
Read Also: Delhi University Allows 4-Year UG Graduates to Apply Directly for PhD
Sheetal Mishra
[email protected]