Cyberattack hits University of Munich, potentially exposing student financial data

The University of Munich is investigating a cyberattack that potentially exposed sensitive student data, including financial information and health insurance details. The university detected the incident on Wednesday and is working with law enforcement and cybersecurity experts to contain the incident and monitor for potential data leaks. The university said an unknown attacker accessed enrollment data stored on one of its IT systems.

The potentially affected records include students’ names, dates of birth and other identifying information; contact details and LMU email addresses; bank account information; and details about students’ courses of study and previous educational qualifications. Health insurance numbers and identifiers associated with Germany’s student financial aid program may also have been affected. In some cases, the compromised information could include data related to the reasons students requested leaves of absence.

The university said examination records, information about specific course content and students’ individual academic performance were not affected. After discovering the breach, LMU disconnected the affected server and brought in external cybersecurity specialists. It is also working with law enforcement on an investigation.

Several systems that were not directly affected were also shut down as a precaution, leaving some internal services temporarily unavailable. The university said the attack had not disrupted teaching, although enrollment was briefly suspended and is expected to resume this week. LMU said affected enrollment deadlines would be extended so students would not be disadvantaged.

The university has also asked specialists to monitor dark-web forums and other relevant platforms for signs that the compromised information is being circulated. Some students have reported problems accessing university services used to prepare for the coming semester.

Universities have long been attractive targets for cybercriminals because their networks can contain large amounts of personal and financial information while serving sprawling populations of students, researchers and staff. U.S. universities have recently faced ransomware attacks, including incidents at the University of Texas, the University of Oklahoma, Stanford University and the University of Michigan, with several of the incidents occurring after holiday breaks. The University of Pennsylvania had its email system disrupted during a cybersecurity incident in October, while Columbia and Harvard universities both faced attacks last year.