Unauthorized Access at LMU Munich Exposed Student Enrollment Data
Summary
LMU Munich reported unauthorized access to a system holding student enrollment data, including personal, financial, health insurance, and academic information. The university said there is no evidence of misuse or publication.
Key points
- LMU reported that an unauthorized attacker accessed enrollment data in one of its IT systems.
- Potentially exposed personal details included names, dates of birth, addresses, email addresses, and phone numbers.
- The data may also have included IBANs, health insurance numbers, BAföG numbers, and students’ academic progress and study history.
- LMU removed the affected system component and is cooperating with investigative authorities.
- The university said it has no evidence that the data was published or misused, and academic operations were not disrupted.
Article Details
- Victim Organization
- Ludwig Maximilian University of Munich
- Victim Domain
- lmu.de
- Incident Type
- Unauthorized access to enrollment data in an LMU IT system
- Disclosure Date
- 2026-09-16
- Data Types Exposed
- Names
- Dates of birth
- Gender
- Addresses
- Email addresses
- Phone numbers
- Bank account numbers (IBAN)
- Health insurance numbers
- BAföG numbers
- Academic progress and study history
- Operational Impact
- LMU removed the affected system component and is cooperating with investigative authorities. Academic operations were not disrupted.
- Ransom Or Extortion
- None reported
- Claim Status
- confirmed