University of Copenhagen breach exposed data of 525,000 people
Original title: Cyberattack on University of Copenhagen exposes data of 525,000 people
Attackers entered a test environment; about 20,000 ID-card PIN codes were reset, and Monday's outage was the same incident.
The University of Copenhagen said attackers entered a test environment detected on 20 October and disclosed on 23 October, taking names, national identity numbers, phone numbers and personal emails for about 525,000 people. Systems including Workzone and Nimbus were shut on Monday; the university later said that activity belonged to the original breach, not a second attack. PIN codes for about 20,000 staff and student ID cards were replaced. UCPH notified the Danish Data Protection Agency.
Unconfirmed: UCPH says it is still analysing the precise extent of the stolen data.
- The intrusion was detected on 20 October and later brought under control.
- UCPH says systems used for day-to-day operations were not reached.
- Selected campus areas closed on 23 October reopened after new PIN codes.
- Some administrative systems still have disruptions after the preventive shutdown.
Impact: Names, national IDs, phones and emails of about 525,000 people
- Victims
- University of Copenhagen
- Organizations
- Danish Data Protection Agency
- Countries
- Denmark
From the original article
2 min read at helpnetsecurity.com
The University of Copenhagen (UCPH) has ruled out a second cyberattack, saying the activity that led it to shut down several administrative systems on Monday is tied to the breach it disclosed last week, which exposed personal data belonging to some 525,000 people.
By Sinisa Markovic · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.