SWPS University of Humanities and Social Sciences

SWPS University of Humanities and Social Sciences, also known as SWPS University, is a higher education institution headquartered in Poland. As indicated by its name, the university specializes in humanities and social sciences disciplines, offering academic programs and research activities in these fields. While specific degree offerings or departmental structures are not detailed in available public breach reports, its designation as a university confirms its core educational and research mission within these academic domains. The institution serves students and academic professionals in Poland, with no explicit information available regarding international campuses or partnerships.

The university operates as a data controller under European Union data protection regulations, responsible for managing personal information of students and employees. This role became prominent during a 2020 cybersecurity incident when threat actors deployed ransomware against the institution. The attack compromised sensitive personal data, triggering mandatory reporting to Poland's data protection authority (UODO). Notably, while SWPS University fulfilled its initial regulatory disclosure obligation by informing authorities of the April 30, 2020 breach, it did not concurrently notify affected individuals about the exposure of their data. This omission prompted an official investigation by UODO to assess compliance with General Data Protection Regulation (GDPR) requirements regarding breach notifications to data subjects.

No information is available regarding the university's enrollment figures, faculty size, or organizational hierarchy beyond its status as an independent higher education provider. The ransomware incident remains its only publicly documented cybersecurity event, highlighting vulnerabilities in institutional data handling processes common to academic environments. The investigation outcome and any subsequent corrective measures taken by the university have not been disclosed in the examined source material. SWPS University's experience underscores the operational risks educational institutions face when managing sensitive community data under evolving regulatory frameworks.