Students’ personal data has been stolen in a “sophisticated and malicious” phishing attack at Lancaster University.
Officials said the information had been used to send bogus invoices to applicants.
“A very small number” of student records, phone numbers and ID documents were also accessed, it said.
The breach has been reported to police and the Information Commissioner’s Office.
In a statement, the university said it became aware of a breach on Friday and has been working to secure its systems.
Source: BBC News