This article is from the source 'bbc' and was first published or seen on . It last changed over 40 days ago and won't be checked again for changes.

You can find the current article at its original source at https://www.bbc.co.uk/news/uk-england-lancashire-49081056

The article has changed 7 times. There is an RSS feed of changes available.

Version 5 Version 6
Lancaster University students' data stolen by cyber-thieves Lancaster University students' data stolen by cyber-thieves
(about 2 hours later)
Students' personal data has been stolen in a "sophisticated and malicious" phishing attack at Lancaster University. The personal data of students and applicants has been stolen in a "sophisticated and malicious" phishing attack at Lancaster University.
Officials said the information had been used to send bogus invoices to applicants. Officials said the information had been used to send bogus invoices to undergraduate applicants.
"A very small number" of student records, phone numbers and ID documents were also accessed, it said."A very small number" of student records, phone numbers and ID documents were also accessed, it said.
The National Crime Agency (NCA) said the university had suffered a "compromise of its systems".The National Crime Agency (NCA) said the university had suffered a "compromise of its systems".
In a statement, the university said it became aware of a breach on Friday and has been working to secure its systems.In a statement, the university said it became aware of a breach on Friday and has been working to secure its systems.
It said the data included names, addresses, phone numbers and emails, linked to students who had applied to join the university in 2019 and 2020.It said the data included names, addresses, phone numbers and emails, linked to students who had applied to join the university in 2019 and 2020.
"We are aware that fraudulent invoices are being sent to some undergraduate applicants," it said."We are aware that fraudulent invoices are being sent to some undergraduate applicants," it said.
"At the present time, we know of a very small number of students who have had their record and ID documents accessed.""At the present time, we know of a very small number of students who have had their record and ID documents accessed."
It said the affected students would be contacted with advice.It said the affected students would be contacted with advice.
Phishing involves attempts to trick web users into handing over sensitive information.Phishing involves attempts to trick web users into handing over sensitive information.
An NCA spokesman said: "A criminal investigation led by the NCA's National Cyber Crime Unit is now under way, and it would not be appropriate to comment further at this stage."An NCA spokesman said: "A criminal investigation led by the NCA's National Cyber Crime Unit is now under way, and it would not be appropriate to comment further at this stage."
A spokesman for the Information Commissioner's Office said it had received a report from the university and would assess the information provided.A spokesman for the Information Commissioner's Office said it had received a report from the university and would assess the information provided.
Lawyer Helen Davenport, who advises clients on cyber security, said it was "essential" sectors such as higher education took cyber-security risks "seriously" and put training and software in place to "proactively shield against future attacks".
She said "all eyes" would now be on how the attack had impacted students' data and how the university intended "to guard against something likely to be attempted again".
Failure to do so "could affect the attractiveness of the university to future candidates", she added.
You may also be interested in:You may also be interested in:
Have you been affected? Contact us at: northwest.newsonline@bbc.co.ukHave you been affected? Contact us at: northwest.newsonline@bbc.co.uk