Margaret Ladipo,19, has been told her personal data was also part of the hack.
She applied to study adult nursing the University of Nottingham last year and was offered a place, but turned it down after accepting a place at another university.
“I didn’t expect something like this to happen to a well-established Russell Group university,” she said.
“I got quite anxious because it [her data] contained really important information, like my national insurance number, which is information I wouldn’t want sharing with anyone.”
Ladipo added that she had changed her bank details and all of her passwords to try and protect herself.
“I just hope they resolve the situation quickly,” she said.
A University of Nottingham spokesperson said: “While the investigation continues, we are unable to provide further information on the nature and extent of the cyber-attack.
“We understand that those affected will have concerns about what this means for their personal data and we are contacting them directly to offer advice and support as we learn more about the incident.
“We have set up a telephone helpline to provide practical support and advice for anyone that has concerns over how this incident may have affected the security of their personal data.
“We take the privacy and security of data that we hold seriously.”
