By 
A significant data breach at the University of Copenhagen has put the personal information of over 525,000 individuals at risk. The educational institution reported the incident, which involved unauthorized access to one of its test environments, on Friday following its discovery the previous Tuesday. The breach affects a considerable number of its community, including students and staff, and highlights ongoing vulnerabilities within academic institutions.
Founded in 1479, the University of Copenhagen is the oldest university in Denmark and a prominent research facility. With around 36,800 students and 10,700 employees across six faculties and more than 200 research centres, it plays a vital role in the educational landscape. However, this recent cyber incident raises serious concerns about the security of its digital systems and the safety of personal data.
In an alarming update, the university revealed that the scope of the breach extended to an additional 20,000 individuals, whose PIN codes were also compromised. This revelation intensifies fears related to potential phishing and social engineering attacks that could exploit the exposed data, specifically national identity numbers, known as CPR numbers in Denmark.
In response to the breach, the University of Copenhagen has taken proactive measures to secure its facilities. Access to critical areas on campus has been restricted as a precaution while the institution rolls out new access codes. The university has also confirmed that it contained the attack and successfully blocked the intruder's access, stating that there is currently no evidence suggesting that systems supporting daily operations were disrupted by the breach.
The university has reported the incident to the Danish Data Protection Agency and affirmed that it is operating in line with the Europe-wide General Data Protection Regulation (GDPR). This signifies the institution's commitment to ensuring compliance with robust data protection standards, even as it deals with the ramifications of the breach. In the wake of such incidents, it is crucial for individuals potentially affected by the breach to maintain vigilance against unsolicited communications. This could mean verifying the authenticity of messages or requests that may come through various channels.
The investigation into the breach is still underway, and the university assures that further updates will be provided as more information becomes available. The incident underscores the critical need for robust security infrastructure as well as the importance of fostering a culture of cybersecurity awareness among all individuals associated with the institution.
Source: bleepingcomputer.com
