The Leipzig University remains offline in key areas following a cyberattack on 28 October 2026. The university’s management said that restoring the systems could take weeks. For security reasons, essential IT services have been switched off, including the website, email systems, and teaching and examination platforms such as AlmaWeb and Moodle.
An crisis team from the university management and the Centre for Communication and Information Processing at the University Leipzig (ZKS) is coordinating the analysis of the affected systems and their gradual restoration. According to the university, the shutdown is intended to enable forensic investigation and prevent further attack attempts. No public information is currently available about the perpetrators, the method of attack or any possible demands.
The university said that teaching, communication with students and administrative processes have been significantly affected. Some events and deadlines are being postponed. In-person services are limited; the University Library is open, though with functional restrictions. According to the crisis team, priorities include protecting personal data, limiting possible further damage and restoring key services in stages.
In statements issued on 2 November 2026, the university management stressed that full operational capacity could “take weeks” to restore. This estimate was described as realistic, not a promise. Responsibility for any investigations lies with the security authorities; the university has informed external partners and authorities.
The university directs people to a temporary information page and its official communication channels for the latest updates. Formal decisions on examination deadlines and alternative arrangements are to be announced once the situation has been assessed sufficiently. According to current public statements, there is no indication of a confirmed large-scale data breach.
Universities have long been considered particularly vulnerable because they operate complex, diverse IT systems while also maintaining open digital working environments. The case in Leipzig is the latest in a series of attacks on scientific institutions in Germany. In the short term, stabilising teaching is the University of Leipzig’s main focus; in the medium term, priorities are likely to include strengthening network security, reviewing contingency plans and speeding up the restoration of critical applications.
Editor: Mira Cadena (Article created with AI assistance).