LMU Munich admission system breached, exposing about 600,000 student and alumni records including bank details

LMU Munich notified under GDPR Article 34 on September 19 that an unauthorized actor accessed student registration data stored in an IT system and that it must assume the data were retrieved ^[1]. A September 28 update confirmed the entire admission system dataset was affected, about 600,000 records of current and former students going back roughly 50 years, including identity, contact and some bank data, while grades and exam data were not affected ^[2][3]. Potentially affected people should not open attachments or links in suspicious emails, be alert to contact referring to LMU or their studies, and never disclose bank details or passwords ^[1].

Industries mainly affected: Education

1. Do not open attachments or links in emails without careful inspection, even if they seem addressed to you ^[1].
2. Be alert to emails, calls and messages referring to LMU or your studies; never disclose bank details or passwords .