Data Breach at University of Copenhagen Exposes Personal Details of Over Half a Million Individuals

University of Copenhagen officials confirmed that a cyberattack has resulted in the unauthorized acquisition of personal data belonging to more than 520,000 individuals, according to a report by Infosecurity Magazine. The breach, discovered earlier this month, has raised immediate concerns among students, staff, and external partners whose information may now be exposed.

The compromised records are believed to include basic identifiers such as names, email addresses, and possibly academic enrollment details. While the full extent of the data set has not been disclosed, the volume of affected individuals suggests that multiple departments and affiliated services were likely targeted in the intrusion.

University administrators have launched an internal investigation and engaged external cybersecurity experts to determine how the attackers gained access. Early indications point to a sophisticated phishing campaign that may have leveraged stolen credentials to move laterally across the institution’s network. The university’s IT security team is working to isolate affected systems and reinforce defenses to prevent further unauthorized activity.

Under the European Union’s General Data Protection Regulation (GDPR), the university is obligated to notify the Danish Data Protection Agency and the individuals whose data was compromised. A formal notice is expected to be issued within the legally mandated 72‑hour window, and the institution has pledged to provide guidance on steps affected parties can take to protect themselves from potential identity theft or phishing attempts.

The incident adds to a growing pattern of high‑profile academic data breaches worldwide, highlighting the challenges universities face in safeguarding large, distributed databases that contain both personal and research information. Experts note that the open nature of many academic environments, combined with the need for collaborative tools, can create attractive attack surfaces for cybercriminals seeking valuable personal data.

University officials have urged the community to remain vigilant, advising users to change passwords, enable multi‑factor authentication, and be wary of unsolicited communications. As the investigation continues, the institution is expected to release a comprehensive report outlining the breach’s cause, the scope of the compromised data, and the remedial measures being implemented to restore confidence in its digital infrastructure.