Hackers breach University of Munich network, steal confidential data

The University of Munich recently disclosed a major cybersecurity incident involving unauthorised access to its internal network and the theft of sensitive confidential data.

 

Ludwig-Maximilians-Universität München (LMU), or the University of Munich, is one of Germany’s largest universities, with around 50,000 students across 18 faculties and more than 300 degree programs covering disciplines from humanities and social sciences to medicine, law, economics, and natural sciences.

 

In a data security incident notice published on its website, LMU said it recently detected unauthorised activity within its internal network. The university stated that attackers had gained access to enrollment master data stored in an IT system. LMU authorities immediately launched an investigation, with assistance from external cyber security experts, to determine the nature and scope of the incident.

 

It also took steps to secure the affected network and notified relevant law enforcement authorities about the incident.

 

“An unauthorised attacker has succeeded in accessing master data on enrollments stored in an IT system of the LMU. Currently, we must assume that this data has also been retrieved. Any modification or other manipulation of the data could be prevented; the data is still available at the LMU,” the University said.

 

The compromised data included names, dates of birth, place or country of birth, contact details, semester data and home addresses, phone numbers, e-mail addresses, bank details including IBAN, names of the account holder, health insurance numbers, BAföG numbers and more

 

LMU added that examination-related information, as well as specific details concerning study content and individual academic achievements, were not affected by the incident.

 

“Immediately after the first signs, the LMU took the most extensive countermeasures and removed the affected component from the system. Since then, we have been working together with the competent investigating authorities as well as with external specialists, also to repel further attacks. 

 

“There was no impairment of the study operation and the enrollment can also be continued after a short interruption from next week. You do not suffer any disadvantages for your studies, and the affected enrollment deadlines will also be extended accordingly,” LMU added.

 

At the time of publishing, no known hacker group claimed responsibility for the ransomware attack on LMU. The institution also did not share details on who was behind the cyber attack, how much data was compromised, or whether it has received a ransom demand.