Reported by 5 outlets
Danish university DTU breach exposes data of up to 200,000 people
Why this score
- Breadth
- 2.00 / 2.0 · 5 sources
- Authority
- 1.80 / 2.0 · best outlet weight
- Severity
- 0.70 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.19 / 0.6 · time to second source
- Recency
- × 0.00 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.0 / 10 = base × recency + community
Desk analysis
Attackers used compromised credentials to log into DTUBasen, the Technical University of Denmark's identity and access management system, and downloaded a large volume of data spanning more than two decades of user records. DTU confirmed the breach on a Friday disclosure and said it cannot determine precisely what was downloaded or how many people are affected. The system holds data for roughly 40,000 active users and 160,000 former users, so up to 200,000 people are in scope.
Exposed data for current users includes Danish civil registration numbers (CPR), full names, home addresses, profile pictures, work email, job titles, office locations, and employment details, plus next-of-kin names, relationships, and phone numbers where users had provided them. For former users, addresses, photos, and next-of-kin data are auto-deleted after six months, which limits but does not eliminate the exposure. University Director Bjarke Bak Christensen called it a serious attack and made scoping the breach the first priority.
Credential compromise of an IAM system is the sobering detail: the perimeter held, the identities did not. CPR numbers enable long-lived identity fraud in Denmark, so the 160,000 former users, who may not expect anything from DTU, are the harder group to reach with warnings.
Watch for the investigation's findings on how credentials were stolen, whether the dataset surfaces on leak forums or is sold for fraud, follow-on phishing and CPR-number abuse against affected people, and any regulatory response given Denmark is already dealing with the far larger CPR registry incident.
Timeline
-
original reporting
Danish university DTU breach exposes data of up to 200,000 people
bleepingcomputer.com · 10d ago · October 3rd, 2026
The Technical University of Denmark (DTU) says information belonging to up to 200,000 users may have been exposed after hackers accessed its identity and access management system and downloaded a large amount of data. The university says the attacker used compromised credentials to log into DTUBasen, its identity and access management (IAM) system, allowing access to more than two decades of user data. In a disclosure on Friday, DTU confirmed that it cannot “determine precisely what information was downloaded or how many people have been affected.” However, the Danish university notes that DTUBasen stores information for nearly 40,000 active users and around 160,000 former users. Potentially exposed information for current users includes Danish civil registration numbers (CPR), full names, home addresses, and profile pictures, as well as work email addresses, job titles, office locations, and other employment-related details. The dataset also contained the names, relationships, and telephone numbers of users’ next of kin, when provided by active users. DTU notes that in the case of former users, details about home addresses, profile pictures, and information about next of kin are automatically deleted after six months. “This is a serious attack on DTU, and we deeply regret the uncertainty it is causing for the people whose information may have been affected,” says University Director Bjarke Bak Christensen. “Our first priority has been to establish the extent of the attack,
-
update from www.dtu.dk
Cyberattack on DTU: Notification of a personal data breach. Hackers have attacked and gained access to DTU’s identity and access management
www.dtu.dk · 11d ago · October 2nd, 2026
Cyberattack on DTU: Notification of a personal data breach. Hackers have attacked and gained access to DTU’s identity and access management
via Mastodon https://www.dtu.dk/english/news/all-news/cyberattack-on-dtu-notification-of-a-personal-data-breach?id=769a9249-9c16-4b82-9573-563575853174
-
update from www.bleepingcomputer.com
Privacy & security, Sat, Oct 3: • Danish university DTU breach exposes data of up to 200,000 people https://www. bleepingcomputer.com/news/s
www.bleepingcomputer.com · 10d ago · October 3rd, 2026
Privacy & security, Sat, Oct 3: • Danish university DTU breach exposes data of up to 200,000 people https://www.
-
mentioned by www.dtu.dk
Data leak in Denmark: data protection breach at DTU. The Technical University of Denmark (DTU) was the victim of a targeted cyberattack.
www.dtu.dk · 10d ago · October 3rd, 2026
-
update from www.bleepingcomputer.com
The Danish DTU confirms a breach exposing data of up to 200,000 people
www.bleepingcomputer.com · 10d ago · October 3rd, 2026
A reminder that universities — rich in personal data — remain high-value targets.
-
mentioned by www.bleepingcomputer.com
🤖 Denmark's Technical University (DTU) says up to 200,000 people may be affected after attackers breached its identity and access management
www.bleepingcomputer.com · 10d ago · October 3rd, 2026
-
update from dev.to
1. Basic Information Original Title: Cyberattack on DTU: Notification of a personal data... # security # threatintel # software # coding # d
dev.to · 10d ago · October 4th, 2026
Basic Information Original Title: Cyberattack on DTU: Notification of a personal data... # security # threatintel # software # coding # d
via Mastodon https://dev.to/anoymask/dtu-breach-iam-data-theft-may-affect-up-to-200000-people-i03
-
mentioned by www.bleepingcomputer.com
🤖 DTU (Technical University of Denmark) breach: attackers used compromised credentials to log into DTUBasen, its IAM system, exposing up to
www.bleepingcomputer.com · 10d ago · October 4th, 2026
-
update from beyondmachines.net
Technical University of Denmark Data Breach Impacts 200,000 Users The Technical University of Denmark reports a data breach after attackers
beyondmachines.net · 9d ago · October 4th, 2026
Technical University of Denmark Data Breach Impacts 200,000 Users The Technical University of Denmark reports a data breach after attackers
via Mastodon https://beyondmachines.net/event_details/technical-university-of-denmark-data-breach-impacts-200000-users-9-o-7-w-l/gD2P6Ple2L
-
update from cyber.netsecops.io
📰 Technical University of Denmark Breach Exposes Data of 200,000 Technical University of Denmark (DTU) suffers a major data breach affecting
cyber.netsecops.io · 9d ago · October 4th, 2026
📰 Technical University of Denmark Breach Exposes Data of 200,000 Technical University of Denmark (DTU) suffers a major data breach affecting
via Mastodon https://cyber.netsecops.io/articles/technical-university-of-denmark-data-breach-exposes-200000-users/?utm_source=mastodon&utm_medium=social&utm_campaign=daily
-
mentioned by www.bleepingcomputer.com
Danish # university # DTU breach exposes data of up to 200,000 people https://www. bleepingcomputer.com/news/secu rity/danish-university-dtu
www.bleepingcomputer.com · 8d ago · October 5th, 2026