LMU Munich

lmu.de · education

On a school or workplace learning platform, the institution bought the system and you were never the customer, so deletion is its call and a request to the vendor is usually sent back to it. The main record stays long after you have gone, with no period named.

Reported incidents

Enrolment records of about 600,000 current and former students copied

2026-09-21

Affected Admissions and enrolment system

LMU Munich detected an intrusion into its admissions system on 16 September 2026 and says it must assume the enrolment data was copied. In an update on 28 September 2026 the university put the number at about 600,000 records of current and former students, going back about 50 years. The data includes names, dates of birth, contact details and LMU email addresses, and bank details for records from 2005 onward. Health insurance and BAföG student aid numbers may also be affected. LMU says passwords and exam results were not affected and it has found no sign the data was published.

People affected typically ask LMU Munich to confirm whether their information was included, and which categories.

The verified route

https://www.lmu.de/de/footer/datenschutz/kontakt-zum-behoerdlichen-datenschutzbeauftragten.html
Privacy request form Recommended

DÆTRAX is a personal data accountability ledger: a dated record of which companies hold your personal data, what you asked them to do about it, and what they claimed in reply.