Did a Hacker Expose Illegal Race-Based Admissions at NYU?

Article Highlights
Off On

Recent developments have thrust New York University’s (NYU) admissions process into the spotlight, following a significant cyber breach where a hacker posted disputed SAT, ACT scores, and GPAs segmented by race for the 2024 student cohort. This unprecedented data exposure has sparked widespread scrutiny and debate, particularly as the hacker claims the data reveals illegal race-based admissions practices. Several racial groups showed variances in average test scores, leading to allegations of unfair advantages in the admissions process.

The Incident and Data Exposure

The hacker identified as “@bestn–gy” on X publicly accused NYU of employing unlawful race-based criteria in their admissions decisions. The data breach unveiled a hacked page that showcased four CSV files, purporting to contain comprehensive admissions data since 1989. These files reportedly consist of over 3 million entries encompassing demographic details, financial aid information, and personal data of applicants and their families. The posted data suggested that Asian students had higher average test scores, while white students exhibited higher GPAs. Comparatively, Hispanic and black applicants had lower metrics, prompting the hacker to suggest NYU’s potential bias in admissions.

NYU spokesperson John Beckman confirmed the cyber intrusion but refrained from verifying the authenticity of the published data. It was emphasized that the institution had notified law enforcement and was actively working to bolster its cybersecurity measures and prevent further violations. The revelations have intensified the ongoing debates on affirmative action, elevating concerns over the transparency and fairness of university admission procedures.

Ethical and Legal Implications

Beyond raising questions about NYU’s admissions practices, the data breach has underscored the critical ethical and legal implications surrounding unauthorized data exposure. The hacker’s actions, although aimed at showcasing alleged injustices, have violated numerous privacy regulations protecting individuals’ personal and educational records. Such unauthorized access and sharing of sensitive data can have far-reaching consequences, damaging the reputations of institutions and jeopardizing individuals’ privacy.

The hacker claimed to have additional data from NYU’s data warehouse capable of substantiating the accusations further but released only a limited portion to demonstrate the alleged misconduct. This scenario parallels a previous incident in which the same hacker compromised the University of Minnesota’s systems, exposing around 7 million social security numbers. These recurring breaches highlight the vulnerabilities within higher education institutions’ cybersecurity frameworks, necessitating urgent upgrades and more robust defenses.

The Road Ahead for University Admissions and Cybersecurity

Recent events have brought NYU’s admissions process under intense scrutiny following a significant cyber breach. In this breach, a hacker posted disputed SAT, ACT scores, and GPAs categorized by race for the 2024 student cohort, raising major concerns. This unprecedented data exposure has ignited widespread debate and examination, especially as the hacker asserts that the data exposes unlawful race-based admissions practices. The information revealed discrepancies in average test scores among various racial groups, prompting accusations of unfair advantages within the admissions process. This has led to a heated discussion about the fairness and legality of NYU’s admissions criteria, making it a focal point of controversy and calls for a more transparent and impartial review system.

Explore more

Maryland Data Center Boom Sparks Local Backlash

A quiet 42-acre plot in a Maryland suburb, once home to a local inn, is now at the center of a digital revolution that residents never asked for, promising immense power but revealing very few secrets. This site in Woodlawn is ground zero for a debate raging across the state, pitting the promise of high-tech infrastructure against the concerns of

Trend Analysis: Next-Generation Cyber Threats

The close of 2025 brings into sharp focus a fundamental transformation in cyber security, where the primary battleground has decisively shifted from compromising networks to manipulating the very logic and identity that underpins our increasingly automated digital world. As sophisticated AI and autonomous systems have moved from experimental technology to mainstream deployment, the nature and scale of cyber risk have

Ransomware Attack Cripples Romanian Water Authority

An entire nation’s water supply became the target of a digital siege when cybercriminals turned a standard computer security feature into a sophisticated weapon against Romania’s essential infrastructure. The attack, disclosed on December 20, targeted the National Administration “Apele Române” (Romanian Waters), the agency responsible for managing the country’s water resources. This incident serves as a stark reminder of the

African Cybercrime Crackdown Leads to 574 Arrests

Introduction A sweeping month-long dragnet across 19 African nations has dismantled intricate cybercriminal networks, showcasing the formidable power of unified, cross-border law enforcement in the digital age. This landmark effort, known as “Operation Sentinel,” represents a significant step forward in the global fight against online financial crimes that exploit vulnerabilities in our increasingly connected world. This article serves to answer

Zero-Click Exploits Redefined Cybersecurity in 2025

With an extensive background in artificial intelligence and machine learning, Dominic Jainy has a unique vantage point on the evolving cyber threat landscape. His work offers critical insights into how the very technologies designed for convenience and efficiency are being turned into potent weapons. In this discussion, we explore the seismic shifts of 2025, a year defined by the industrialization