University of Copenhagen confirms hackers got into one of its test environments holding personal data of 525,000 people, including Danish CPR numbers, and later added 20,000 staff and students whose PIN codes were exposed, BleepingComputer reports
The University of Copenhagen in Denmark has confirmed a cyber attack in which hackers gained access to one of its test environments, which held personal data belonging to 525,000 people, according to BleepingComputer, which reported on 26 October 2026 that the university detected the breach the previous Tuesday and disclosed it on Friday.
According to BleepingComputer, the university is still investigating the extent of the incident and warns that full names, national identity numbers (CPR), phone numbers and email addresses may have been exposed.
In an update reported by BleepingComputer, the university added another 20,000 staff and students whose PIN codes were exposed; it has restricted physical access to certain critical locations on campus as a precaution and is reopening them as it hands out new access codes.
BleepingComputer reports the university says it contained the attack and blocked the attacker's access, that there is no indication the attackers reached systems supporting daily operations or disrupted university activities, and that it has reported the incident to the Danish Data Protection Agency.
The university's own notice (news.ku.dk) could not be read by this desk (connection failed); the details above are as reported by BleepingComputer.
- Product
- University of Copenhagen test environment containing personal data; campus PIN access codes
- Versions
- n/a — data breach
- Exploited in Australia?
- unknown
- Patch to
- University of Copenhagen students and staff: be wary of unsolicited calls, emails and messages that use your details, and verify requests independently (advice reported by BleepingComputer). For other organisations: keep real personal data out of test environments where you can, or protect those environments like production, and make sure building access codes can be reissued quickly if they leak.