Data breach at Madrid Complutense University

The Madrid Complutense University has suffered a cyberattack through an application developed by the institution itself to manage the information of students on internships.

In this attack, cybercriminals have been able to extract the personal data of students using this application. Although the UCM cannot confirm the extent to which users have been affected, the data that have been stolen, these could be names, ID/passport, addresses and other data such as degrees and/or supporting documentation of these data.

The university has reinforced security, filed a complaint with the Police and notified the incident to AEPD and CCN-CERT. In addition, students have been advised to change their passwords.