The data of Heinrich Heine University Düsseldorf (HHU) has been stolen.
4,500 HHU members' personal information were stolen from a previous university service provider.
Names, email addresses, and, in about 800 cases, so-called password hashes, are all contained in them.
The number of persons affected who must take action is minimal because the data is approximately six years old but was just recently disclosed on the dark web.
The server of a former IT service provider has been identified by university IT experts as the data's source; the vulnerability was quickly patched.
TPRM report: https://scoringcyber.rankiteo.com/company/heinrich-heine-universitat-dusseldorf
"id": "uni35214823",
"linkid": "heinrich-heine-universitat-dusseldorf",
"type": "Data Leak",
"date": "02/2023",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'customers_affected': 4500,
'industry': 'Education',
'location': 'Düsseldorf, Germany',
'name': 'Heinrich Heine University Düsseldorf',
'type': 'Educational Institution'}],
'attack_vector': 'Server Vulnerability',
'data_breach': {'number_of_records_exposed': 4500,
'personally_identifiable_information': ['Names',
'Email addresses'],
'type_of_data_compromised': ['Names',
'Email addresses',
'Password hashes']},
'description': 'The data of Heinrich Heine University Düsseldorf (HHU) has '
"been stolen. 4,500 HHU members' personal information were "
'stolen from a previous university service provider. Names, '
'email addresses, and, in about 800 cases, so-called password '
'hashes, are all contained in them. The number of persons '
'affected who must take action is minimal because the data is '
'approximately six years old but was just recently disclosed '
'on the dark web. The server of a former IT service provider '
"has been identified by university IT experts as the data's "
'source; the vulnerability was quickly patched.',
'impact': {'data_compromised': ['Names',
'Email addresses',
'Password hashes']},
'response': {'remediation_measures': ['The vulnerability was quickly '
'patched']},
'title': 'Data Breach at Heinrich Heine University Düsseldorf',
'type': 'Data Breach',
'vulnerability_exploited': 'Server vulnerability of a former IT service '
'provider'}