UM Cyber Attack Symposium – Lessons learnt
At a symposium on Wednesday 5 February, Maastricht University (UM) addressed the cyber attack that took place on 23 December. The symposium was open to invited guests only. Other interested parties could follow the livestream, which you can replay below. Due to the complexity of the subject matter and the presence of Dutch media only, the symposium was held in Dutch.
The symposium provided insight into what actually happened, and addressed broader cyber-related issues such as digital security in the public sector.
UM enlisted the help of an IT security company as of 24 December. Fox-IT assisted in crisis management, charting the attack and conducting forensic investigations, and advised during the recovery process.
You can read a management summary of the Fox-IT report and UM's response to the report in English
Or you can read the full Fox-IT report, with an explanation from UM in Dutch
If you have any questions about the report or the symposium, please email us
A photo impression of the seminar
All photos by Philip Driessen
Watch the live recordings of the cyber attack symposium (Dutch only)
On 23 December 2019, there was a serious cyberattack against Maastricht University (UM). Since then, experts have been working hard to repair the damage and reactivate all systems. On this page you can find the latest update and an overview of all previous updates.
Students and employees:
Find the contact information of your faculty/unit in the FAQ.
UM press officer Fons Elbersen, +31 6 53944500.
27 January 2020
From 9 o'clock this morning, students and staff are able to print, copy and scan again from UM workstations. VPN is also up and running, so as of today, people can work safely from home, with secure access to UM servers.
Print orders can be given by selecting the printer installed on UM workstations. The myprint website is also operational. People who were logged in from their workplace before 9 am may receive an "access denied" message when selecting a printer. If so, they will need to log in again.
Access to the Virtual Private Network has also been restored, but only for employees. The start-up dialogue box shows an extra field, with 'Employees' as the default choice.
Students looking to access UM Services can use Student Desktop Anywhere (SDA), which has been operational since 6 January.
Many things are working again, but not everything
Five weeks after the cyber attack, work has almost returned to normal for most staff. Students are able to attend classes, take exams, access the online library and more. See also the most current overview of which systems are already working and which are not available yet. At the same time, a system can sometimes work slowly, suddenly shut down or otherwise fail to meet the standards that the UM community is used to. This requires some patience from everyone and understanding for the colleagues who are working hard every day for us.
Schedules for period 4 available
The schedules for period 4 are now available for students. This is slightly later than usual, but no later than the previously announced date.
Leniency arrangement for students
For students who have been disadvantaged or suffered damage as a result of the cyber attack, there is a leniency arrangement. You can apply for this by completing the Application Form Cyber Attack Leniency Committee on the website. Do this as quickly as possible, but at the latest within two months after the disadvantage or damage has become known. Submission is possible until 31 August at the latest. In principle, every application will be evaluated by the Executive Board within four weeks of receipt.
Registering online for open days
Prospective students who want to register for the upcoming Bachelor's or Master's Open Day, can do so online again. For this, you can visit the website of the Bachelor's Open Day on 8 February or the Master's Open Day on 7 March.
Information desks and mailboxes for students and staff
As from 24 January, the temporary email addresses are no longer in use. (Prospective) students and employees can reach us through the regular communication channels again (please check the website of your own faculty, service centre or study programme for which you are applying). Did you already send an email to a temporary email address and haven’t received an answer yet? Please send your question again to the contact address of your faculty, service centre or study programme, and you will receive an answer as soon as possible. Students who have questions that are not answered in the FAQ and that are not related to their study programme, can send an email to study[at]maastrichtuniversity[dot]nl.
Opening hours call centre for students
The call centre can be reached on working days from 8:30 until 17:00 at +31 43 38 85 388.
24 January 2020
- Schedules for period 4 available
Leniency arrangement for students
- Registering online for open days
17 January 2020
- What is Carbon Black?
What does it mean for your privacy?
15 January 2020
- No printing / scanning / copying / VPN yet
MyUM portal can be reached again
13 January 2020
- Symposium ‘Lessons learnt’ on 5 February
- More and more systems operational
10 January 2020
- More systems operational
- No more daily updates
9 January 2020
- Lessons learnt will be shared in February
- How to change alumni passwords?
8 January 2020
- Have you forgotten your old password?
7 January 2020
- Schedules period 4 available later than usual
- No emails lost
Systems restored step by step
6 January 2020
- Outlook fully operational from 7 January
- Network drives accessible from 7 January
- First operational day without major problems
- New Year’s reception and special message Executive Board
5 January 2020
- Accessible to students: Student Portal, schedules (read-only), Blackboard and study materials
- All UB services operational
- Update on internet, data files, e-mail, SDA/VDI, back office activities
- New Year’s reception will take place as planned
4 January 2020
- Impression University Library and call centre
- Main updates FAQ (capital letters not visible when changing password)
3 January 2020
- More than 15.000 passwords changed
- Main updates FAQ (activities prospective students, academic ceremonies, alumni)
2 January 2020
- Most important education-related computer systems up and running again
- Attention: reset your password before 6 January!
- Main updates FAQ (wifi, visa and computer use)
2 January 2020
- Statement UM: no information regarding communication with the group
- Response Public Prosecutor’s Office
31 December 2019
- New Year’s Day: a day offline
31 December 2019
- Information desks and mailboxes for employees and students
- Working on 2 January
- Leniency arrangement for students
- Opening hours call centre
- Changing passwords
- Executive Board grateful for everyone’s efforts
30 December 2019
- Education resumed on 6 January
- Important systems for students online again
- FAQ available
- Scheduled exams and resits will take place
29 December 2019
- Special helpline expanded
- FAQ available soon
- Questions from study programme applicants
- Questions from employees with grant applications
- Attention: don’t use the systems!
28 December 2019
- Buildings open 2 January
- Helplines for students and staff open shortly
- Special attention to issues such as teaching schedules, exams, theses, applications, grant applications, research projects, job applications
27 December 2019
- Forensic investigation and repairs
- Focus on protection against other attacks
- Official police report filed
- All systems offline
24 December 2019
- UM hit by serious cyber attack on 23 December 2019
- Almost all Windows systems affected
- Particularly difficult to use e-mail services
- Unclear how much time it will take to find a solution
- Buildings closed until Sunday