Confirmed breach

UCL data breach

DKDenmark

DR, TV 2 Fyn and Ritzau reported a data breach at UCL (Denmark) on 11 November 2026, and it has been confirmed. It affected 44,000 persons.

People affected: 44,000persons
Reported: 11 November 2026News report and 6 more

What was exposed 6

CPR (national ID) numbers
Email addresses
Phone numbers
Names
Addresses
Workplaces

How it happened

How: Hacking hacker attack source
Our translation from Danish
hackerangreb

Sources 7

News reportDRLarge educational institution hit by hacker attack (our translation from Danish)11 November 2026 · 44,000 persons
Confirmed by UCL: UCL has sent an email to those affected
Our translation from Danish
UCL har sendt en mail ud til de berørte
News reportTV 2 FynHackers have had access to CPR numbers since March (our translation from Danish)11 November 2026 · 44,000 persons
Confirmed by UCL: Mads Lildholdt, who is IT manager at UCL, states that 44,000 people are affected by the attack.
Our translation from Danish
Mads Lildholdt , der er IT-chef ved UCL, oplyser, at 44.000 personer er ramt af angrebet.
News reportTV 2 FynUCL warns students about hacker attack (our translation from Danish)11 November 2026 · 44,000 students
News reportRitzauHackers have had access to 44,000 students' information (our translation from Danish)11 November 2026 · 44,000 students

Show all 7 sources

News reports are read by an AI model; every fact taken from an article was checked word for word against it, and anything it could not find was dropped. · Corrections and changes

If UCL had your data

Look for UCL’s own notice or letter: it should say what of yours was involved. Keep it.
An ID number cannot be changed, so lock it: a credit freeze or fraud alert in the US, a credit warning (kreditadvarsel) on borger.dk in Denmark, Cifas protective registration in the UK.
Your email address is out: expect convincing phishing. Open UCL by typing its address yourself, never through a link in an email or text, and check the sender before you reply.
Your phone number is out: ask your mobile operator for a PIN or port-out lock, so nobody can move your number to another SIM card and take your login codes.
Your home address is out: be wary of letters, parcels or visitors that mention UCL, and of texts asking for a “delivery fee”.
Expect scams that use your details: calls, texts or emails pretending to be UCL, your bank or the police. Never give codes or passwords, never approve a sign-in you did not start, never move money.

Use UCL? Hear first next time

Breach Radar tells you when a company you use is breached, and what to do. Free, and your list stays on your phone.

Download on the App Store

Questions about the UCL breach

Was UCL hacked?

DR, TV 2 Fyn and Ritzau reported a data breach at UCL (Denmark) on 11 November 2026, and it has been confirmed. It affected 44,000 persons. How it happened, by the sources: hacking.

What data was exposed in the UCL breach?

CPR (national ID) numbers, Email addresses, Phone numbers, Names, Addresses and Workplaces, by the notices and reports on this page.

How do I know if I was affected?

Organisations normally tell the people whose data was involved, by letter or email, and that notice says what of yours was in it. We cannot look up individual people. If you got a notice, check that it is real, then follow the steps on this page.

Is there a UCL data breach settlement?

No settlement open for claims is on record for UCL as of 15 November 2026. Every open settlement is listed with its deadline.

Is a letter, email or text about the UCL breach real or a scam?

A real notice names the breach, says what data was involved and never asks for a password, a code or a payment. Criminals often send fake notices after a breach is in the news. Do not use links or phone numbers in the message: go to UCL’s own site, or check the letter here.

More breaches in Denmark

Every breach in Denmark →

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Official registers · Corrections and changes · Accuracy audit · For journalists · Found a mistake? Tell us and we correct it.