Denmark's University of Copenhagen has confirmed hackers gained access to one of its test environments, exposing personal data belonging to 525,000 people — full names, national identity (CPR) numbers, phone numbers and email addresses. The university detected the intrusion on 20 October and disclosed it on 23 October, then updated on 25 October that the PIN codes of a further 20,000 staff and students had also been exposed, prompting it to restrict physical access to some critical campus locations as a precaution. The institution, Denmark's oldest, founded in 1479, has approximately 36,800 students and 10,700 employees across six faculties; it is still investigating the incident's full scope. The exposed records raise the risk of targeted phishing and social-engineering campaigns against students and staff, the university warned. The disclosure is first-party and one of the largest education-sector breaches reported in Europe in the past year, on a scale comparable to the 2023 MOVEit-linked attacks on UK universities.

• Source article