Cybersecurity & Breaches
University of Copenhagen Breach Hits 525K; DreamHost Resets Passwords
Hackers accessed a test environment at Denmark’s oldest university, while U.S. web host DreamHost locked email and FTP/SFTP accounts following an Oct. 23 File Manager incident.
Your listening Queue & catch up
Add a story or build a catch-up queue to start listening.
The University of Copenhagen confirmed that hackers breached one of its test environments containing personal data belonging to 525,000 people as well as campus PIN codes for 20,000 staff and students, while U.S. web hosting provider DreamHost forced password resets across email and FTP/SFTP accounts following an ongoing security incident that began Oct. 23, according to reports by BleepingComputer.
University of Copenhagen Test Environment Breach and Campus PIN Restrictions
Founded in 1479, the University of Copenhagen serves approximately 36,800 students and 10,700 employees across six faculties and more than 200 research centers. The university detected the intrusion last Tuesday, disclosed it Friday, and expanded its notice Sunday to include 20,000 staff and students whose physical access PIN codes were exposed.
Potentially exposed data in the test environment includes full names, Danish national identity numbers (CPR), phone numbers, and email addresses. Out of caution, the university restricted physical access to certain critical campus locations while distributing new access codes, and reported the breach to the Danish Data Protection Agency under Europe’s General Data Protection Regulation (GDPR).
DreamHost Forces Email and FTP/SFTP Resets and Warns of Forwarding Rules
In a separate incident reported by BleepingComputer, U.S. web host and domain registrar DreamHost—which serves more than 400,000 customers across over 100 countries and hosts at least 1.5 million websites and 750,000 WordPress installations—forced password resets for email and FTP/SFTP users after connectivity problems hit its File Manager interface on Oct. 23.
With File Manager access still unavailable, DreamHost sent batched recovery instructions to account owners over the weekend and advised impacted users to inspect every email address for unrecognized forwarding rules and remove any unauthorized forwarding destinations, while urging users to rotate any passwords reused on other platforms.
Sources
Comments (0)
No comments yet. Be the first to share a thought on this story.