Cyberattack hits university of Warsaw, personal data leaked on dark web

Polish law enforcement agencies are investigating a cyberattack on the University of Warsaw after personal data belonging to staff and students was reportedly published on the dark web.

The Central Bureau for Combating Cybercrime said that around 200,000 files obtained through a breach of the university’s systems appeared online on the night of April 16, Polish media reports.

Agency spokesperson Marcin Zagorski said that specialised software was used in the attack. He added that the data had not been encrypted and remained accessible within the university’s systems, noting that no ransom demands were made by the attackers.

The University of Warsaw confirmed that approximately 32,800 files may have contained personal information relating to students, staff, and applicants. Investigators believe the data may have been accessed and copied between January and February.

Authorities suspect that attackers gained entry using valid login credentials, which may have been compromised earlier after a user’s device was infected with malware.

The investigation is ongoing as cybersecurity officials work to determine the full scope of the breach and identify those responsible.

By Sabina Mammadli