Overview
- The attacker gained access on 16 September to the university's enrolment system, prompting LMU to take central systems offline and begin a forensic investigation.
- LMU says about 600,000 admission and registration records spanning roughly 50 years were accessed, with older entries limited to basic registration and semester history.
- Records from about 2005 onward may include additional personal data such as bank details, insurance or BAföG numbers and study‑history entries while passwords and exam or grade data were not accessed.
- Key services have been restored in phases: immatriculation, EvaSys and EvaExam are available, the LSF lecture directory is being reintroduced with restricted network access, and OpenCampus and Apte remain offline pending checks.
- The university reports no ransom demand or confirmed publication or misuse so far, continues dark‑web monitoring, considers an external attacker likely, and urges current and former students to be alert for phishing or suspicious contacts.