Breach, Threat Management, Data Security

Erasmus University breach wider than first announced


Rotterdam, Netherlands-based Erasmus University announced a breach a few weeks ago, but at that time it was believed not much more than student names, addresses and logins were stolen. However, yesterday further details were announced.

How many victims? 17,000 students, although this tally might climb as 270,000 webforms residing on a web server were breached.

What type of information? Nearly 5,000 forms held medical details on students, including general details as well as ailments they suffered. Students' financial details were also stored on the web forms, including bank account details and credit card information. No PIN or security codes were held on the platform.

What happened? Mystery so far surrounds this incursion as no passwords were involved in the attack and it's unknown at this point how the security of the server was bypassed.

Response: While a web page on Rotterdam University's website offers general description of the Netherlands' rules surrounding a breach, no announcement about this breach can be found on the site.

Source: The Merckle

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms and Conditions and Privacy Policy.