Information on data leak for former staff members

27.10.2025

An external service provider of the Austrian Academy of Sciences (ÖAW) that handles the payroll accounting was hacked recently. A data leak affecting past and present staff of the ÖAW and all its institutes including IMBA occurred.

Human Resources (HR) has informed current staff and took measures to contact former staff members that were affected. For a few former staff members, however, no contact information could be found.

If you are a former IMBA staff member who was not contacted about a breach of privacy and suspect that you could be affected by the data leak, you are invited to contact HR for further information: hr-gmi-imba(at)vbc.ac.at

This site uses cookies. They ensure essential functionalities of the website and enable us to continuously optimize content. Help us by agreeing to the collection of statistical data and the presentation of external multimedia content. You can change your cookie settings at any time. Further information can be found in the privacy settings and by clicking the Data Protection Link.

These cookies are required for the smooth functioning of our website.

Name	Purpose	Storage duration	Type	Provider
CookieConsent	Remembers your consent to the use of cookies.	1 year	HTML	Web Consent
fe_typo_user	Assigns your browser to a session on the server. This only affects the content you see and is not evaluated or processed by us	-	HTTP	Web User

With the help of these cookies, we strive to make our offer even more attractive for you. The user flow can be analyzed and assessed using pseudonymised data from website users. This gives us the opportunity to optimize website content.

Name	Purpose	Storage duration	Type	Provider
_pk_id	Used to store a few details about the user like unique visitor ID.	13 months	HTML	Matomo-id
_pk_ref	Used to store information about the user's referring website.	6 months	HTML	Matomo-ref
_pk_ses	Short-term cookie to save temporary data from the visit.	30 minutes	HTML	Matomo-ses
_pk_cvar	Short-term cookie to save temporary data from the visit.	30 minutes	HTML	Matomo-cvar
_pk_hsr	Short lived cookie used to temporarily store data for the visit.	30 minutes	HTML	Matomo

With the help of these cookies, we strive to improve the information we offer users by providing multimedia or interactive content such as videos.

Name	Purpose	Storage duration	Type	Provider
YouTube	A connection to YouTube will be established to view videos.	-	Connection	YouTube
SoundCloud	A connection to SoundCloud will be established to play audio files.	-	Connection	SoundCloud
Twitter	A connection to Twitter will be established to display tweets.	-	missing translation: type.	Twitter
_cs_c	Indicates whether the user has consented to ContentSquare tracking.	394 days	missing translation: type.	Spotify (ContentSquare)
_cs_id	Stores a unique user ID for ContentSquare session analysis.	394 days	missing translation: type.	Spotify (ContentSquare)
_ga	Used to distinguish users.	400 days	missing translation: type.	Google Analytics
_ga_BMC5VGR8YS	Used by Google Analytics to persist session state.	400 days	missing translation: type.	Google Analytics
_ga_S0T2DJJFZM	Used by Google Analytics to persist session state.	399 days	missing translation: type.	Google Analytics
_ga_ZWG1NSHWD8	Used by Google Analytics to persist session state.	400 days	missing translation: type.	Google Analytics
_ga_ZWRF3NLZJZ	Used by Google Analytics to persist session state.	400 days	missing translation: type.	Google Analytics
_gid	Used to distinguish users.	1 days	missing translation: type.	Google Analytics
_ScCbts	Stores temporary session or playback preferences.	6 days	missing translation: type.	Spotify
_scid	Spotify advertising ID used for analytics and retargeting.	395 days	missing translation: type.	Spotify
_scid_r	Spotify advertising ID used for analytics and retargeting.	395 days	missing translation: type.	Spotify
eupubconsent-v2	Stores the IAB Transparency & Consent Framework string.	364 days	missing translation: type.	IAB / Spotify
OptanonAlertBoxClosed	Saves the state of your data protection consent.	364 days	missing translation: type.	OneTrust
OptanonConsent	Saves the state of your data protection consent.	365 days	missing translation: type.	OneTrust
sp_adid	Spotify advertising identifier.	365 days	missing translation: type.	Spotify
sp_landing	Tracks which page the user landed on within Spotify.	1 days	missing translation: type.	Spotify
sp_m	Stores the user’s market region (Spotify).	399 days	missing translation: type.	Spotify
sp_t	Session token used for Spotify playback and access.	365 days	missing translation: type.	Spotify

Research

Information on data leak for former staff members

Contact

Vienna BioCenter

Links