DTU Breach May Expose Personal Data of Up to 200,000 People
Summary
Attackers used compromised credentials to access DTU’s DTUBasen identity system and download data potentially belonging to up to 200,000 current and former users. DTU is notifying affected people and warning of phishing and identity-fraud risks.
Key points
- Attackers accessed DTU’s DTUBasen identity and access management system using compromised credentials and downloaded a large amount of data.
- The potentially affected population includes nearly 40,000 active users and around 160,000 former users.
- Potentially exposed data includes CPR numbers, names, addresses, profile photos, work details, and, for some active users, next-of-kin names, relationships, and phone numbers.
- DTU says it cannot determine exactly what data was downloaded or how many people were affected.
- DTU is notifying potentially impacted people and warns that exposed information could enable identity fraud and more convincing phishing.
- People with a DTU connection since 2003 are advised to treat unexpected messages and authentication requests cautiously, avoid sharing passwords, and change reused passwords.
Article Details
- Victim Organization
- Technical University of Denmark (DTU)
- Incident Type
- Unauthorized access and data exposure after attackers used compromised credentials to access DTUBasen.
- Data Types Exposed
- Danish civil registration numbers (CPR)
- Full names
- Home addresses
- Profile pictures
- Work email addresses
- Job titles
- Office locations
- Other employment-related details
- Next-of-kin names, relationships, and telephone numbers
- Affected Records
- Data for up to 200,000 current and former users may have been exposed; DTU could not determine the precise number affected.
- Operational Impact
- Attackers accessed DTUBasen and downloaded a large amount of data. No service disruption was reported.
- Ransom Or Extortion
- None reported.
- Claim Status
- confirmed