FAQs

Frequently Asked Questions Regarding the Cyber Attack at Mainz University of Applied Sciences

The current situation is challenging for all of us, and we know that many questions remain unanswered. We are working to provide you with clear and timely information. The crisis management team "Cyber Attack" is being led by Chancellor Jens Egler.

Below you will find our FAQs, which we will continuously update and expand.

General Information

How is the University for Applied Sciences informing about the cyberattack?

The university uses the Mainz Campus2Go app as a central, internal information channel to provide all updates transparently, bundled, and accessible at any time. The university management also reserves the right to convene a general assembly if necessary.

How long will the current system outage last?

We cannot make a statement about this at this time.

Is the university reachable by e-mail?

No, all e-mail addresses ending in hs-mainz.de are affected. Incoming messages are delivered, but they cannot be read or processed by employees and lecturers. No automatic confirmation of receipt is sent, and no out-of-office notices are issued. E-mails are among the IT systems that have been shut down for security reasons.

Do I have to expect further system outages?

Yes, shorter and resolvable outages of media and tools such as the university website or the telephone system may occur in the coming days, as these are integrated into the affected systems.

Who can I contact if I have a question?

The university has set up a hotline: 06131-628-2000

–

Regulations on Work & Task Performance

Employees and Supervisors

Which tasks should I currently perform as an employee?

Discuss with your supervisor which activities can currently be carried out under the given restrictions (e.g., without access to e-mail).

What happens if I currently cannot perform any tasks?

If your supervisor concludes that no meaningful activities can currently be carried out, you should reduce overtime hours within the scope of possibilities.

What must supervisors do now?

Supervisors must actively maintain contact with their employees. It must be ensured that all areas of the organization are continuously reachable, even if the usual communication channels are disrupted. When deciding on the assignment of tasks, supervisors should check whether employees can take on tasks that support other organizational units of the University for Applied Sciences.

Can employees currently work at the university locations?

Basically yes. Please coordinate this with your supervisors.

How do I currently record my working hours?

Time recording is still possible on the devices on site. Please also note down your times for security.

–

Teaching & Study

Does teaching still take place?

Yes, teaching is taking place as usual in person.

–

Devices, IT Usage, and Data Security

Are we allowed to use our company devices again?

It must be assumed that all university-owned Windows devices operated by the ZIK (Central IT Department) could be affected.

These devices may only be used offline – inside and outside the University for Applied Sciences.
A handover regulation for Windows end devices for employees has been communicated in Update 11 via Campus2Go.
Please do not copy any more data to drives, mobile hard drives, or USB sticks.
The devices must be handed in to the ZIK. Please coordinate this with your supervisors or department management.
The ZIK checks the devices; the data on them is secured, not deleted.
Self-administered Windows and Macintosh devices are not affected according to current knowledge.

How can I use my private laptop at home? Are private devices affected?

According to the current status, self-administered Windows and Macintosh devices are not affected.
University-owned Windows devices could be affected and may therefore only be used offline (!) (no LAN either).
Whether private devices could be impaired is currently being checked.

Can mobile hard drives or USB sticks that I used at the university be affected?

This is currently being investigated.

Is data exchange secure?

Uploading documents to cloud solutions from an affected device does not pose a security risk according to the current status. However, data exchange via USB sticks remains strictly prohibited.
There is also no indication that the malware has jumped to other devices on the same network (e.g., in the home network).

–

Passwords, Data & Security

Have my passwords been compromised and what should I do?

It can be assumed that passwords that you entered or saved on affected devices administered by the ZIK have been leaked. The attackers had access using remote maintenance software and a keylogger. Please change all private and professional passwords that you used on these devices as a precaution.

For self-administered devices, the university recommends the analysis software Malwarebytes to identify problems.

What happens to my data on the drives or in Seafile?

According to current knowledge, the data is safe. We are not currently assuming data loss.

Is personal data of employees or students affected?

This is currently being checked.

How should I behave in the event of suspicious offers in connection with the cyberattack?

Be vigilant about possible copycats who might try to profit from the situation (e.g., offers to buy back supposedly leaked data).
Do not respond to demands, do not open attachments or links.

Instead, contact the hotline immediately at 06131 628-2000.

–