Breaches and incidents
Aarhus University: attacker on a server tried to change passwords of about 1,700 users
AU said its IT department found an ongoing attack in which “a hacker had gained access to a server” (discovered Monday, 19 Oct) and attempted to access and...
- Disclosed
- Verification
- Checked against a primary source
What happened
- AU said its IT department found an ongoing attack in which “a hacker had gained access to a server” (discovered Monday, 19 Oct) and attempted to access and change passwords for about 1,700 current and former employees and students; “These attempts were unsuccessful” and there is no indication confidential or sensitive information leaked. The page is dated 21 Oct but also shows “Revised 20.10.2026”.
- Root cause: not disclosed; AU states there is no connection to the global PHP vulnerabilities, while it is updating some PHP-based self-service systems.
- No attacker named.
- Access was terminated and the attack contained; AU is working with external experts and urged staff and students to watch for phishing.