DTU Breach Exposes Critical Gaps in University Identity Management Security
In October 2026, the Technical University of Denmark (DTU) suffered a significant data breach when attackers used compromised credentials to access DTUBasen, the university's identity and access management system. The attackers downloaded a substantial amount of data potentially affecting up to 200,000 current and former users, including nearly 40,000 active users and around 160,000 former users. Exposed information included Danish civil registration numbers (CPR), full names, home addresses, profile pictures, work details, and next of kin information spanning over two decades of university records. This incident highlights the growing threat of credential-based attacks targeting educational institutions' identity management systems. As universities increasingly digitize their operations and store extensive historical data, they become attractive targets for cybercriminals seeking personal information for identity fraud and sophisticated phishing campaigns.
Kill Chain
