The University of Bedfordshire exposed sensitive student and staff data due to an unpatched content management system (CMS) vulnerability. Attackers exploited this flaw to gain unauthorized access, potentially affecting over 10,000 individuals. Immediate remediation and audit of exposed data are critical.