University of Munich Investigates Cyberattack Exposing Student Financial Data

Cyberattack on Student Data

Germany's Ludwig Maximilian University of Munich (LMU Munich) announced a cyberattack where an unknown actor accessed a system containing sensitive student information. The university confirmed on Saturday that enrollment data stored on one of its IT systems was accessed, and it is assumed the data was retrieved.

Scope of Compromised Information

The potentially affected records include students’ names, dates of birth, contact details, LMU email addresses, bank account information, and details about courses of study and previous educational qualifications. Health insurance numbers and identifiers for Germany’s student financial aid program may also have been compromised. In some cases, data related to reasons for leaves of absence could be included. Examination records, specific course content, and individual academic performance were not affected.

Investigation and Response

LMU Munich detected the incident on Wednesday but has not determined when the unauthorized access began or its duration. The university has not disclosed the number of affected individuals or the volume of data obtained. There is no evidence that the data has been altered, deleted, published, or misused. The university disconnected the affected server, engaged external cybersecurity specialists, and is cooperating with law enforcement on the investigation. Several unaffected systems were also shut down as a precaution, causing temporary unavailability of some internal services.

Operational Impact

The attack has not disrupted teaching activities. However, enrollment was briefly suspended and is expected to resume this week. LMU stated that affected enrollment deadlines would be extended to prevent student disadvantage. The attacker has not been identified, and the university has not indicated if a ransom demand was received.