Cyber Thieves Steal Lancaster University Students’ Data

Dominique Adams

24 July 2019, 01.16pm

Students’ names, addresses, phone numbers and emails were stolen by hackers in a “sophisticated ” phishing attack, according to University officials.

Lancaster University has confirmed that a “very small number” of students have had their personal data stolen in a “malicious” phishing attack.

The information was used by the attackers to send fake invoices to undergraduate applicants, according to university officials, and it is believed around 12,500 prospective students have been affected by the breach.

The National Crime Agency (NCA) said the university’s systems had been compromised. The university became aware of the breach last Friday and has since been working to secure its systems.

In a post from the university’s Twitter account, it said: “Lancaster University has been subject to a sophisticated and malicious phishing attack which has resulted in breaches of student and applicant data. The matter has been reported to law enforcement agencies and we are now working closely with them.”

The statement said that the university was aware of two data breaches and that undergraduate student applicant data records for 2019 and 2020 entry had been accessed along with the data of some current students.

According to the university, it quickly established an incident team as soon as it became aware of the breach and immediately reported it to the Information Commissioner’s Office (ICO).

A university spokesperson said: “Since Friday we have focused on safeguarding our IT systems and identifying and advising students and applicants who have been affected. This work of our incident team is ongoing as is the investigation by law enforcement agencies.”

The ICO has confirmed it has received a report from the university and will assess the information provided. The university is in the process of contacting and informing students about the breach.

It is urging applicants, students and staff who have received any suspect communications to contact the university immediately via telephone (01524 510044) or email (admissions-advice@lancaster.ac.uk).