---
title: "LMU Munich student-registration data incident"
description: "LMU Munich student-registration data breach: verified timeline, impact and response through October 7, 2026."
incident_type: "Data incident"
status: "active"
last_modified: "2026-10-07"
canonical_url: "https://www.ally.security/incidents/lmu-munich-student-registration-data-incident-2026"
markdown_url: "https://www.ally.security/incidents/lmu-munich-student-registration-data-incident-2026.md"
stix_url: "https://www.ally.security/incidents/lmu-munich-student-registration-data-incident-2026/stix.json"
---

# LMU Munich student-registration data incident

LMU Munich disclosed unauthorized access to student registration data.

Last modified Oct 7, 2026 · 2 sources

## Summary

- **Environment:** Student admissions system
- **Operational impact:** Registration interrupted; other systems isolated for checks
- **Financial impact:** No incident cost established in the reviewed evidence

## What happened

[LMU Munich](https://www.lmu.de/) disclosed unauthorized access to student registration data. [2](#source-2)

## Impact

Its September 28 update estimated 600,000 affected records spanning approximately 50 years. [1](#source-1)

Depending on the record, information included identity, contact, bank and study-related details. [1](#source-1)

The initial notice reported a short registration interruption. [2](#source-2)

## Timeline

### September 19, 2026 — Public disclosure

LMU issued its [initial notice](https://www.lmu.de/en/about-lmu/structure/central-university-administration/media-relations-and-communications/press-room/press-release/information-about-a-personal-data-breach-f446c16e.html). [2](#source-2)

### September 28, 2026 — Scope update

LMU published expanded findings. [1](#source-1)

### October 7, 2026 — Briefing updated

This briefing was last reviewed and updated on October 7, 2026.

## Threat Group & Attack Vector

The reviewed disclosure does not establish the initial access method.

### Actors

- No threat actor group has been identified in the reviewed public evidence.

### TTPs

- No specific MITRE ATT\&CK technique is currently mapped for this case.

## Response

LMU isolated the affected system and engaged authorities and external specialists. [2](#source-2)

It announced restricted course-catalogue access would resume September 30 after security checks. [1](#source-1)

## Assets

[Download the case-scoped STIX 2.1 bundle](<https://www.ally.security/incidents/lmu-munich-student-registration-data-incident-2026/stix.json>)

## Sources

Primary source records used to research this incident.

<a id="source-1"></a>

### Update on the persona data breach

official · Ludwig Maximilian University of Munich · Sep 28, 2026

<https://www.lmu.de/en/about-lmu/structure/central-university-administration/media-relations-and-communications/press-room/press-release/update-on-the-persona-data-breach-71c6c19a.html>

<a id="source-2"></a>

### Information about a personal data breach

official · Ludwig Maximilian University of Munich · Sep 19, 2026

<https://www.lmu.de/en/about-lmu/structure/central-university-administration/media-relations-and-communications/press-room/press-release/information-about-a-personal-data-breach-f446c16e.html>

<details>
<summary>Evidence ledger</summary>

Review the supporting structured claims.

1. **Affected Organization · 100% confidence · current**  
   LMU Munich student-registration data breach: Ludwig Maximilian University of Munich
2. **Exposed Data Category · 100% confidence · current**  
   LMU Munich student-registration data breach: Contact information
3. **Resulted In · 100% confidence · current**  
   LMU Munich student-registration data breach: LMU isolated the affected system and engaged authorities and external specialists.
4. **Resulted In · 100% confidence · current**  
   LMU Munich student-registration data breach: The initial notice reported a short registration interruption.
5. **Resulted In · 100% confidence · current**  
   LMU Munich student-registration data breach: Depending on the record, information included identity, contact, bank and study-related details.
6. **Resulted In · 100% confidence · current**  
   LMU Munich student-registration data breach: Scope update
7. **Exposed Record Count · 100% confidence · current**  
   LMU Munich student-registration data breach: 600,000 record
8. **Disclosed At · 100% confidence · current**  
   LMU Munich student-registration data breach: 2026-09-19
9. **Resulted In · 100% confidence · current**  
   LMU Munich student-registration data breach: LMU Munich disclosed unauthorized access to student registration data.
10. **Resulted In · 100% confidence · current**  
   LMU Munich student-registration data breach: Its September 28 update estimated 600,000 affected records spanning approximately 50 years.
11. **Exposed Data Category · 100% confidence · current**  
   LMU Munich student-registration data breach: Financial account information
12. **Exposed Data Category · 100% confidence · current**  
   LMU Munich student-registration data breach: Names
13. **Occurred At · 100% confidence · current**  
   Scope update: 2026-09-28
14. **Exposed Data Category · 100% confidence · current**  
   LMU Munich student-registration data breach: Education records
15. **Resulted In · 100% confidence · current**  
   LMU Munich student-registration data breach: It announced restricted course-catalogue access would resume September 30 after security checks.

</details>