The data that was leaked on Thursday on the dark web by the hackers of the Open University of Cyprus (OUC) is encrypted, Police Cybercrime Department Chief Andreas Anastasiades told the Cyprus News Agency (CNA) on Friday.
Asked if there was any information regarding the number of individuals affected by the leak, he stated that there was a partial publication of some data, but their contents "are encrypted, locked, and we cannot know exactly what kind of data has been published."
Anastasiades said the amount requested by the hackers was €100,000 in cryptocurrency. The deadline for paying the ransom has expired, resulting in the data being published on the dark web on Thursday.
In a press release, the Open University of Cyprus said it experienced a malicious cyberattack on March 27, 2023. The attack resulted in several central University services and critical systems going offline as a precaution measure.
Yet, (sensitive) personal data relating to members of the academic community have been leaked, it added.
The OUC said from day one of the cyberattack, the University has been in constant communication and cooperates effectively with the Combating Cybercrime Department of the Cyprus Police to undertake the relevant investigations, and the Commissioner for Personal Data Protection.
The competent authorities cooperate with the relevant Professional Services of the Open University of Cyprus in order to stop the acquisition of these data, which constitutes a criminal act.
At the same time, the University, together with a number of external partners, are working closely to restore all disrupted operations by taking additional technical and organizational measures to mitigate all risks and repair all vulnerabilities. The university community is regularly informed by the relevant professional services about all relevant measures and good practices for secure use of online/network services, while OUC is committed to continue its efforts to safely restore all its central services and critical systems.
It added that anyone interested for his or her personal data that may have been affected can contact the Open University of Cyprus via email at [email protected] or by phone 00357-22411730.