Man Arrested After Cyber Attack On Lancaster University

24 July 2019, 13:13 | Updated: 24 July 2019, 13:26

A 25 year old man has been arrested after student data was stolen in a cyber attack on Lancaster University.

He was arrested on suspicion of Computer Misuse Act and fraud offences on Monday following the breach.

Records and ID documents of some students were accessed in the phishing attack and fake invoices were sent to undergraduate applicants.

A spokesman for the National Crime Agency said:

"Officers from the NCA's National Cyber Crime Unit (NCCU) arrested the man on Monday and he has since been released under investigation while enquiries are ongoing."

In a statement, the university said it became aware of the breach on Friday and set up an incident team to deal with the situation.

It said:

"Lancaster University has been subject to a sophisticated and malicious phishing attack which has resulted in breaches of student and applicant data."

Data from undergraduate applicants for 2019 and 2020, including their names, addresses, telephone numbers and email addresses, was accessed and fake invoices sent to some potential students.

The student records system was also breached in the attack and the university contacted a "very small number" of students who had record and ID documents accessed.