Students Affected by Phishing Attack

Lancaster University has been the victim of a sophisticated and malicious phishing attack resulting in student's personal data being stolen.

Officials said the information has been used to send fake invoices to undergraduate applicants.

According to the National Crime Agency (NCA), the university suffered a compromise of its systems, with the institution becoming aware of the breach on Friday.

The affected students are due to be contacted with advice, with a spokesman for the NCA adding: "A criminal investigation led by the NCA's National Cyber Crime Unit is now under way, and it would not be appropriate to comment further at this stage."

Data that was stolen included names, addresses, phone numbers and emails linked to students who had applied to join the university in 2019 and 2020.