The Technical University of Denmark says hackers accessed its DTUBasen identity and access management system and may have exposed data belonging to up to 200,000 current and former users. DTU says the attacker used compromised credentials to log in to the IAM system, which stores data going back to 2003. Potentially exposed data includes Danish civil registration numbers, names, home addresses, profile photos, work details, and some next-of-kin contact information.
Why it matters: This puts current and former students, staff, guests, and partners at risk of identity fraud and highly convincing phishing. Anyone with a DTU account since 2003 should be alert for emails, texts, and calls referencing DTU, change reused passwords, and consider credit monitoring or alerts tied to their CPR number.
Ionut Ilascu
2026.10.03
100% relevant
This article is the initial public disclosure of DTU's breach, including the affected system, attack vector, approximate scope, and the types of personal data at risk.
← Back to all stories