The **University of Copenhagen** in Denmark has disclosed a significant data breach, impacting over half a million individuals. The incident, which came to light last Tuesday, involved unauthorized access to one of the university's test environments. Initially, the university confirmed that personal data for 525,000 individuals was compromised. In a subsequent update, an additional 20,000 staff and students were identified as having their PIN codes exposed, raising concerns about both digital and physical security.  ### Scope of Exposed Data While the full extent of the breach is still under investigation, the **University of Copenhagen** has warned that the following personal information may have been exposed: * Full names * National identity numbers (**CPR**) * Phone numbers * Email addresses The exposure of such sensitive data significantly increases the risk of phishing, social engineering, and identity theft for affected individuals. ### PIN Code Compromise and Mitigation The compromise of PIN codes for staff and students has led to proactive security measures. The university temporarily restricted physical access to critical campus locations and is in the process of distributing new access codes to mitigate potential risks. ### Incident Containment and Regulatory Compliance The **University of Copenhagen** has confirmed that the attack has been contained, and the attacker's access has been blocked. There is currently no indication that systems supporting daily operations were affected or that university activities were disrupted. In line with regulatory requirements, the incident has been reported to the Danish Data Protection Agency. The university is also taking appropriate steps to comply with the **General Data Protection Regulation (GDPR)**, given the breach's scope and the nature of the exposed data. ### Recommendations for Affected Individuals Students and staff who may have been impacted by this incident are strongly advised to exercise extreme caution regarding unsolicited communications. It is crucial to independently verify the legitimacy of any requests for personal information and to be vigilant against potential phishing attempts. The **University of Copenhagen** has pledged to provide further updates as its internal investigation progresses and more details about the impact become available.