Sorbonne Université allegedly subjected to major hack

Paris-based Sorbonne Université had its employees' data purportedly compromised following a cybersecurity incident, reports Cybernews.

Analysis of a data sample shared by attackers revealed 32,000 employee entries, including full names, job positions, departments, email addresses, contract types, salaries, ZIP codes, and internal codes, according to Cybernews researchers, who noted that other information touted to have been stolen was absent. Threat actors previously alleged stealing bank account numbers, digital payslips, salary transfer details, Social Security numbers, sick leave documents, CVs, diplomas, and cover letters, as well as employee listings, internal directories, and assignment tables.

"The most likely potential impact is data abuse for social engineering attacks. If it is true that the threat actor has banking and social security information of the employees, there is also a risk for financial fraud and identity theft," said researchers. Sorbonne Université has yet to comment on the claimed breach.