December 2, 2025 - IT security News: IT security incident / Precautionary measures
Two weeks ago, Heidelberg University identified preparations for a far-reaching attack on its IT infrastructure and fended it off with targeted IT security measures. These steps, which are still being implemented, have proven to be appropriate and effective.
The university computer center has set up a crisis management team and is currently working very closely with the relevant state authorities, in particular the Baden-Württemberg State Criminal Police Office under the direction of the Karlsruhe central Public Prosecutor's Office, the State Office for the Protection of the Constitution, the Baden-Württemberg Cybersecurity Agency, the State Data Protection Commissioner, and the bwInfoSec university federation.
Limited availability of services – gradual reopening in preparation
Due to the incident, several services, including email and decentralized websites, are only accessible via the university network or a VPN connection.
- The services will now, after careful review and the establishment of additional protective measures, gradually become available again over the internet without a VPN, likely by the middle of next week, i.e., Wednesday, December 10, 2025. This applies only to services that meet the required security standards.
Only after the official investigations have been completed and the results are available can a gradual return to normal operations take place. Further information cannot be provided at this time due to the ongoing investigations.