LMU Munich data breach affects enrollment information

Ludwig-Maximilians-Universität München (LMU) has reported a data security incident involving an IT system containing enrollment information. An unauthorized attacker gained access to personal data, but the university stated that data manipulation or alteration was prevented. LMU is cooperating with authorities to investigate the breach.

The incident was identified on September 16, 2026. Immediate countermeasures were taken, including shutting down the affected system component. The exact duration and start time of the unauthorized access are still under investigation.

Affected data categories include identifying information (name, date of birth), contact details (addresses, phone numbers, LMU email), and potentially bank details (IBAN, account holder name). Sickness insurance numbers, BAföG numbers, study progress data, and information on previous educational qualifications may also be affected. LMU specified that examination data and individual academic performance records were not compromised.

Investigations into the full scope and number of affected individuals are ongoing. LMU has implemented further security measures and is working with external cybersecurity specialists. The university confirmed that academic operations and enrollment processes are continuing after a brief interruption, with enrollment deadlines being extended to mitigate any disadvantage for students.