Editorial Note: This article was rewritten using Artificial Intelligence (AI) based on original, verified sources. The accompanying images were upscaled with the assistance of AI. Any resemblance of figures in the images to real persons is entirely coincidental. Brands and logos depicted are the property of their respective owners and do not imply official endorsement or affiliation.
MUNICH, Germany – The Technical University of Munich (TUM) confirmed on Friday afternoon that it has become the target of a sophisticated cyberattack. The breach has compromised the personal data of all individuals registered on the university’s central ‘myTUM’ portal, prompting an immediate security response from the institution.
Scope of the Data Breach
According to an official statement released by the university, unauthorized actors gained access to the ‘myTUM’ portal and successfully exfiltrated passwords used for the central login system. In addition to passwords, the attackers obtained names, private addresses, and dates of birth for all individuals with a TUM account.
The impact varies by user group:
- Employees: Compromised data includes work addresses and official telephone numbers.
- Students: Data may include student ID numbers, enrolled degree programs, and the number of semesters completed.
The university stated that it has logged and analyzed the attackers’ access patterns. Current assessments suggest that data from the ‘TUMonline’ system, such as grades or applications for study places, remains unaffected, though investigations are ongoing.
Security Measures and Response
In response to the breach, TUM has deactivated the ‘TUMonline’ system and blocked the affected accounts to prevent further unauthorized access. The university has also reported the incident to the Bavarian State Commissioner for Data Protection and filed a criminal complaint.
University officials have urged all affected individuals to change their TUM passwords immediately. Several options for doing so will be available until Monday. Furthermore, students and staff are advised to exercise extreme caution regarding emails, letters, and phone calls, as attackers could potentially use the stolen personal information to craft highly credible, fraudulent communications.
Context of the Attack
This incident follows a similar cyberattack on the Ludwig-Maximilians-University (LMU) in Munich, which occurred in late September and continues to impact its operations. The university is working closely with cybersecurity experts to mitigate the damage and strengthen its digital infrastructure against future threats.
Source: Abendzeitung München
“,news_title:
