University of Copenhagen breach exposes data of 525,000 people
The University of Copenhagen disclosed a data breach exposing information of 525,000 people. The report does not detail the type of data exposed or the cause of the incident. Those affected should watch for phishing attempts.
What happened
The University of Copenhagen confirmed that attackers accessed a test environment holding data on around 525,000 people: full name, Danish national identity number, work and home telephone numbers and personal email address. PIN codes for ID cards of about 20,000 staff and students were also compromised and replaced. The attack was detected on October 20 and reported to the Danish Data Protection Agency.
Why it matters
Exposed data enables targeted phishing and identity fraud attempts against staff, students and alumni. The university preventively shut down administrative systems, including Workzone and Nimbus, after a new attack on Monday, disrupting operations. The incident falls under GDPR, with sanction risk and notification duties.
What to do
Affected people should change related passwords, enable two-factor authentication and distrust messages citing personal data. Security teams should reinforce antiphishing warnings and monitor misuse of national identity numbers. Review test environments holding real personal data.
For the technical team
- Affected
- Universidade de Copenhague (dados de pessoas afetadas) · University of Copenhagen test environment database: full name, Danish national identity number, work telephone, home telephone and personal email address. PIN codes for about 20,000 staff and student ID cards. Administrative systems Workzone (document management) and Nimbus (application budgeting) shut down preventively.
- Exploitation
- University states there is no indication attackers reached systems supporting day-to-day operations. No threat actor had publicly claimed responsibility at time of publication (Infosecurity Magazine, Oct 27, 2026). A new hacker attack on Monday prompted the preventive shutdown of administrative systems.
- Fix
- No software fix. University reset the compromised PIN codes, temporarily restricted physical access to selected critical campus locations and performed a controlled shutdown of the affected administrative systems.
- Vector
- Hackers accessed a university test environment holding real personal data; initial entry vector not detailed in the sources. Attack detected on October 20, 2026 and contained, according to the university.
- More details
- Incident reported to the Danish Data Protection Agency under GDPR scope. Public disclosure on October 23, three days after detection, with a PIN update on October 25. Risks cited by press: convincing phishing and identity fraud. The university is still investigating the full scope of the breach.
Timeline
International press coverage confirms the theft of personal data on over 520,000 people from the University of Copenhagen.
New details: attackers reached a test environment holding data on 525,000 people, including Danish national ID numbers; PIN codes for about 20,000 ID cards were compromised, replaced by the university, and access to critical locations was temporarily restricted.
BleepingComputer reports a breach exposing data of 525,000 people at the University of Copenhagen.
Sources 3 sources
- @BleepinComputer @BleepinComputer
- @DarkWebInformer @DarkWebInformer
- Copenhagen University Breach Compromises Data on Half a Million People Infosecurity Magazine
