2026-10-30
University of Copenhagen data breach (about 525,000 people): names, CPR numbers, phone numbers and emails — what to do
The University of Copenhagen (Københavns Universitet, KU) announced on October 23, 2026 that hackers had gained access to one of its test environments. Consistent reports citing the university say data on about 525,000 people was obtained: full name, CPR number (Denmark's civil registration number), work and private phone numbers and a private email address. In an update on October 25, the university said the PIN codes of the ID cards of about 20,000 staff and students were also compromised, and that new PINs had been issued. Reports say the intrusion was detected on Tuesday, October 20, and brought under control. The university has told the Danish Data Protection Agency. Its own pages could not be opened from this site on October 30, so this article relies on those reports. This site's take: treat any message that uses your name and CPR number as unproven, check through channels you open yourself, and never give out a CPR number, password or PIN on request.