Zero Radar
← feed
HighData breachupdated 27 Oct 2026, 20:16 UTC

University of Copenhagen data breach exposes records of 525,000 people

Hackers got into a test system at the University of Copenhagen that held personal information. About 525,000 people may have had their details exposed, and some PIN codes were exposed too.

Attacks reported (BleepingComputer)2 independent sources
SeverityHighData breach
Being exploited?ReportedBy BleepingComputer, not officially confirmed yet
What to doCheck exposureIf you studied or worked at the University of Copenhagen, change your passwords and be wary of unexpected messages about your account or PIN.
How sure is this?2 independent sourcesSeveral independent publishers agree

How the attack works simplified

  1. 1Hackers gain accessEntry point not described in sources
  2. 2Test environment reachedTest system held real personal data
  3. 3Personal data accessedAbout 525,000 people's records involved
  4. 4PIN codes exposedAbout 20,000 more found in later update
  5. ResultPersonal data and PINs exposed

What happened

Attackers accessed one of the University of Copenhagen's test environments containing personal data; the university later added about 20,000 more staff and students whose PIN codes were exposed.

Why it is dangerous: Exposed personal data and PIN codes can be used for identity theft, fraud, and targeted phishing against current and former students and staff.

Are you affected?

You are affected if you were a student or staff member whose personal data was stored in the University of Copenhagen test environment.

University of Copenhagen test environment containing personal data of about 525,000 people, plus about 20,000 staff and students whose PIN codes were exposed.

What to do

  1. Watch for phishing or suspicious messages referencing your university account or PIN
  2. Change your university account password and any PIN codes you reuse elsewhere
  3. Check the university's official notices for guidance on your specific data

Timeline

  1. 26 Oct 2026, 22:20 UTC
    Publicly disclosed
  2. 26 Oct 2026, 22:22 UTC
    Picked up by Zero Radar
  3. 27 Oct 2026, 20:10 UTC
    Reported by DataBreaches.net · DataBreaches.net
  4. 27 Oct 2026, 20:16 UTC
    BleepingComputer reported on it · BleepingComputer

Sources 2 reports, oldest first

Security press established security newsrooms

Technical details

ID
ZR-e1a0cc25 · ZR-627cc70b
Disclosed
26 Oct 2026, 22:20 UTC
On Zero Radar
26 Oct 2026, 22:22 UTC (2 min after disclosure)
Last change
27 Oct 2026, 20:16 UTC

The plain-language parts and the attack diagram were written by an AI model (anthropic/claude-haiku-5.5) from the sources above. Facts like versions, exploitation and dates come from the sources themselves. How Zero Radar works

University of Copenhagen data breach exposes records of 525,000 people · Zero Radar