Hackers have stolen confidential data on hundreds of students in a cyber attack at Lancaster University.
Lancaster University chiefs described the incident as a ‘sophisticated and malicious phishing attack’.
They reported the incident as soon as they became aware of a breach last Friday.
As a result, the cyber attack is being investigated by police and the Information Commissioner’s Office (ICO), the UK data protection regulator.
The stolen data includes names, addresses, phone numbers and emails from students who applied to join the university in 2019 and 2020.
In a statement, the university revealed that hackers then used the information to send fake invoices to applicants.
“We are aware that fraudulent invoices are being sent to some undergraduate applicants,” it said.
“At the present time, we know of a very small number of students who have had their record and ID documents accessed.”