University of Warsaw Data Breach Exposes 200,000+ Sensitive Files on Darknet

A prolonged intrusion at the University of Warsaw between January and February 2026 resulted in the theft and darknet publication (15 April 2026) of an ~850 GB data dump containing over 200,000 files, including roughly 200 GB of sensitive personal records (names, PESEL/passport numbers, contact and financial details, health and employment records). Attackers used credentials likely obtained via malware, exfiltrated data stealthily over months, and the university is coordinating with national cybercrime agencies while urging affected individuals to monitor accounts, change passwords, and enable multi-factor authentication.