Overview
- University IT teams discovered the unauthorized access on Wednesday, September 16, and immediately isolated the affected enrollment system.
- LMU says attackers appear to have copied personal immatriculation data including names, birth dates, addresses, phone numbers, email addresses, IBANs and some insurance and BAföG information.
- External IT forensics teams and the Bavarian state criminal police are investigating while specialists monitor Darknet marketplaces for any sign of published records.
- So far the university reports no evidence that the stolen data have been publicly posted or used fraudulently and says examination found no tampering with exam or grade files.
- Students have had enrollment services briefly paused and given extended deadlines and are being urged to watch for phishing and financial scams as authorities complete the probe.