University of Copenhagen breach exposes data on about 525,000 people
Original title: University of Copenhagen Data Breach Exposes 525,000 People’s Personal Data, Including Phone Numbers
A test-environment intrusion exposed national ID numbers, phones and emails, plus ID-card PINs for about 20,000 people.
The University of Copenhagen confirmed hackers accessed a test environment and exposed personal data for about 525,000 people. The university says it has blocked the attackers and brought the incident under control. It has not said how entry occurred or whether every record was downloaded or published. The case was reported to the Danish Data Protection Agency and is treated as within GDPR.
Unconfirmed: How the test environment was entered, and whether every record was taken or published, is not established.
- The attack was detected on October 20, 2026, and disclosed on October 23.
- Exposed fields include full names, Danish identity numbers, phones, and personal emails.
- About 20,000 staff and student ID-card PINs were replaced before disclosure.
- Selected campus locations were restricted on October 23 until those PINs were changed.
- The 20,000 cardholders are inside the 525,000 figure, not an added total.
Impact: Names, national IDs, phones, emails, and some PINs exposed
- 1.Independently verify unexpected requests that cite personal details.
- Victims
- University of Copenhagen
- Organizations
- Danish Data Protection Agency
- Countries
- Denmark
From the original article
2 min read at cybersecuritynews.com
The University of Copenhagen has confirmed a data breach that exposed personal information belonging to about 525,000 people after hackers accessed a university test environment. The affected database contained full names, Danish national identity numbers, work and private telephone numbers, and personal email addresses. The university is still examining the full extent of the exposure.
By Abinaya · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.