Breaches and incidentsBriefChecked against a primary source
Technical University of Denmark (DTU): identity system breached, data back to 2003 on up to 200,000 people
Attackers compromised DTU user profiles and used them to access DTUBasen, the identity and access management system, downloading “a large amount of data”.
- Disclosed
What happened
- Attackers compromised DTU user profiles and used them to access DTUBasen, the identity and access management system, downloading “a large amount of data”. DTUBasen holds about 40,000 active and 160,000 former users; data for active users may include CPR numbers, names, home addresses, photos, job titles and next of kin; former users’ CPR numbers and names remain stored.
- Root cause: compromised user profiles used to reach the IAM system (how profiles were compromised not stated; DTU warns against approving unexpected login requests).
- Attacker: not identified.
- Response: contained, external specialists, Datatilsynet notified, e-Boks notifications.
Sources
- https://www.dtu.dk/english/news/all-news/cyberattack-on-dtu-notification-of-a-personal-data-breach?id=769a9249-9c16-4b82-9573-563575853174
- https://konbriefing.com/en-topics/cyber-attacks-universities.html
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.