Charles University hit by data breach, asks users to change passwords - Expats.cz
Charles University has confirmed a serious cyberattack where an intruder accessed and downloaded information from its central Study Information System.
The university is still establishing how many people were affected, exactly what information was taken and whether it has been misused. Users of the university's Central Authentication Service, CAS UK, have been asked to change their passwords within 10 days of receiving an email notification.
Attack details
According to the university, the attacker compromised a web application and subsequently gained unauthorized access to information held in SIS. The university said it took security measures immediately after discovering the incident, including shutting down the compromised application and securing the relevant access points.
We are currently dealing with it and establishing all the circumstances.
Investigation ongoing
The university has reported the attack to Czechia's National Cyber and Information Security Agency, NÚKIB. Prague police confirmed they had received a report and were investigating. NÚKIB spokesman Jakub Neščiva confirmed the agency was handling the incident but said legal confidentiality obligations prevented further details.
Charles University has not yet established the full extent of the breach, confirming only that some information was downloaded. The university said it would publish further findings as the investigation progresses.
Related
