Sorbonne Université allegedly hit by major attack

Paris-based Sorbonne Université had its employees' data purportedly compromised following a cybersecurity incident, reports Cybernews.

Analysis of a data sample shared by attackers revealed 32,000 employee entries, including full names, job positions, departments, email addresses, contract types, salaries, ZIP codes, and internal codes, according to Cybernews researchers.

The researchers noted that other information purported stolen was absent. Threat actors previously alleged they stole bank account numbers, digital payslips, salary transfer details, Social Security numbers, sick leave documents, CVs, diplomas, and cover letters, as well as employee listings, internal directories, and assignment tables.

"The most likely potential impact is data abuse for social engineering attacks. If it is true that the threat actor has banking and social security information of the employees, there is also a risk for financial fraud and identity theft," said researchers.

Sorbonne Université has yet to comment on the claimed breach.

Written by

Sharon Florentine Editorial Director

Sharon Florentine is the editorial director for CyberRisk Alliance’s Channel Brands and acting editorial director for SC UK. She is responsible for setting strategy and editorial direction and developing content for news, features, analysis and other written content, moderates live webcasts, and oversees research projects. Sharon has previously held key editorial, content and leadership positions at DevOps.com, Security Boulevard, CIO.com, Ziff Davis Enterprise, and CRN, among others.