Collegium Humanum has notified a data breach to the President of the Personal Data Protection Office
A personal data breach notification sent by Collegium Humanum – Warsaw Management University was received by the Personal Data Protection Office on the 1st of March 2024. The breach consisted in the publication on the Internet (Facebook) of a list of 56 graduates of the above-mentioned university. The identity of the author(s) of the aforementioned publication is not known at this time.
As the controller is in the process of verifying whether the leakage originated from its data resources, the Personal Data Protection Office has decided to send a letter to Collegium Humanum requesting additional information from the university. The idea is to establish the circumstances under which the breach occurred, the controller’s response to the assumed risk (the notification indicated a high risk to the rights or freedoms of persons), the implementation of the breach notification in relation to the persons affected by the incident and the implementation of remedial measures to mitigate the risk of recurrence of the breach.