Lancaster University has been targeted by a “sophisticated phishing attack”.
The provider said some students’ personal data has been stolen, but said the cyber-attack was the subject of “a live investigation” and would “not be making any further comment at this stage”.
A 25-year-old man, from Bradford, has been arrested on suspicion of fraud offences.
Fraudulent invoices are being sent to some undergraduate applicants – University of Lancaster
In a statement, the university said it became aware of two data breaches on Friday and has been working to secure its IT systems.
Undergraduate student applicant data records for 2019 and 2020 entry were accessed by hackers, and names, addresses, telephone numbers and email addresses were stolen.
You might also like GDPR: one year on
The second breach occurred in the student records system and the university said a “small number of students…have had their record and ID documents accessed”.
The statement also said the incident team established to handle the situation was “aware that fraudulent invoices are being sent to some undergraduate applicants”.
It also said the team had contacted students “to advise them what to do” and reported the attack to the Information Commissioner’s Office.
Got a news story for UB? Contact James Higgins on 0117 300 5526