University of Copenhagen Confirms Hackers Accessed Test Environment With Data of 525,000 People
Summary
The University of Copenhagen confirmed hackers accessed a test environment containing personal data of 525,000 people. Another 20,000 staff and students may have had PIN codes exposed. The university says it contained the attack and is investigating.
Key points
- The university detected the breach on October 20 and disclosed it on October 23.
- Hackers accessed a test environment containing data belonging to 525,000 people; the university says the full impact remains under investigation.
- Potentially exposed information includes names, CPR national identity numbers, phone numbers and email addresses.
- The university later said PIN codes for another 20,000 staff and students were exposed, prompting temporary restrictions on access to certain campus locations.
- The university says it contained the attack and blocked the attacker; it has no indication that systems supporting daily operations were accessed or university activities disrupted.
- The incident was reported to Denmark’s Data Protection Agency, and the university says it is taking steps with relevant regulators.
Article Details
- Victim Organization
- University of Copenhagen
- Incident Type
- Cyber attack and data breach involving unauthorized access to a test environment containing personal data.
- Disclosure Date
- 2026-10-23
- Data Types Exposed
- Full names
- National identity numbers (CPR)
- Phone numbers
- Email addresses
- PIN codes
- Affected Records
- The university reported that data belonging to 525,000 people may have been exposed. A later update added 20,000 staff and students whose PIN codes were exposed; whether these individuals overlap with the initial group or increase the total is not specified.
- Operational Impact
- The university said it contained the attack and blocked the attacker’s access. It reported no indication that systems supporting daily operations were accessed or university activities disrupted. As a precaution after PIN codes were exposed, physical access to certain critical campus locations was restricted and gradually restored as new access codes were distributed.
- Ransom Or Extortion
- Unknown
- Claim Status
- confirmed