In 2021, the University of Minnesota experienced a data breach that became public in September 2023. The incident involved unauthorized access to the university's database, potentially compromising personal information dating back to 1989. The breach affected a wide range of individuals, including prospective students, current and former students, employees, and participants in university programs.

How many accounts were compromised?

The breach impacted data related to approximately 2 million individuals.

What data was leaked?

The data exposed in the breach included full names, addresses, telephone numbers, Social Security numbers, driver's license or passport information, university ID numbers, birthdates, and demographic information.

How was UMN hacked?

Unauthorized access to the University of Minnesota's database was gained in 2021, with the breach becoming public in July 2023 when an individual claimed to have posted sensitive admissions data online. The specific methods used by the hackers remain unclear, as available sources do not provide details on the techniques employed or any malware discovered on the university's servers.

UMN's solution

In response to the hacking incident, the University of Minnesota took several measures to enhance its security and prevent future breaches. These steps included increasing data access control measures, reducing the number of people authorized to access sensitive information, expanding multi-factor authentication and other security measures, and increasing monitoring for suspicious activities. The university also engaged forensics professionals to assess the credibility of the data breach claim and ensure the security of their electronic systems.

How do I know if I was affected?

The University of Minnesota has not explicitly mentioned reaching out to affected individuals. However, if you are associated with the university and are concerned about your data, you can visit Have I Been Pwned to check if your credentials have been compromised in this or any other data breach.

What should affected users do?

In general, affected users should:

• Change Your Passwords: Immediately update your passwords for any accounts that may have been compromised. Make sure the new passwords are strong and unique, not previously used on any other platform.

• Reset Passwords for Other Accounts: If you've used the same or similar passwords for other online accounts, reset those as well. This is crucial as attackers often try using stolen passwords on multiple sites.

• Enable Two-Factor Authentication (2FA): Activate 2FA on any affected accounts. Consider enabling this additional security feature on all other important online accounts to significantly reduce the risk of unauthorized access.

For more specific help and instructions related to UMN's data breach, please contact UMN's support directly.

Where can I go to learn more?

If you want to find more information on the UMN data breach, check out the following news articles:

• Data Incident | University of Minnesota System

• Massive data breach hits University of Minnesota

• University of Minnesota says 2021 data leak may have compromised student info as far back as 1989 - CBS Minnesota