Technical University of Munich portal hacked, login passwords stolen
Central login passwords belonging to registered users of Germany's Technical University of Munich were stolen through its legacy myTUM portal, and attackers also gained access to the TUMonline academic management system using administrator credentials. Personal information, including names, addresses and dates of birth, of around 60,000 students and staff may have been affected, and the actual extent of data exfiltration remains under investigation. The university suspended the accounts involved and shut down the systems, with TUMonline returning to service on 9 November.
Key facts
- Affected organisation
- Technical University of Munich
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Login passwords of registered myTUM users stolen; personal information of around 60,000 students and staff potentially affected
- Cause / method
- Passwords and administrator credentials stolen through the legacy myTUM portal were used to access TUMonline
- Location
- Germany
If your data was exposed
Exposed dataPasswordNameAddressDate of birth
- Change your password, and also change it on any other site where you use the same one. Turn on two-factor authentication if available.
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
Timeline
- The university disclosed the theft of myTUM passwords and unauthorised access to TUMonline, announcing system shutdowns and suspension of the accounts involved.
- It emerged that personal information of around 60,000 students and staff may have been affected and that the actual extent of data exfiltration was under investigation.
- The suspended TUMonline academic management system returned to service.
12 related reports
- TU Munich Cyberattack (November 2026): What Was Exposed and What to Do
- Plattformen offline: Cyberangriff auf TU München
- Hacker-Angriff auf TUM: Was bisher über den Vorfall bekannt ist
- IT Security Incident at TUM
- TUM myTUM breach: stolen passwords, service restrictions, and what users should do
- Hackers hit Technical University of Munich, passwords stolen from everyone on myTUM
- TUMonline: Cyberangriff auf die TU München
- Cyberangriff auf TU München: Altsystem myTUM als Einfallstor
- Technical University of Munich hit by hacking attack exposing passwords and personal data
- 慕尼黑工业大学遭黑客攻击，myTUM 用户密码被盗
- Portal breach at Germany's top university exposes every registered user's password
- Angriff über Altsystem: TU München nahm TUMonline vom Netz
Other incidents at Technical University of Munich
Registered users’ login passwords stolen in Technical University of Munich portal breach
Impact: Theft of registered users’ central login passwords and possible access to personal information
The legacy myTUM portal at Germany’s Technical University of Munich was breached, and registered users’ central login passwords were stolen. The attackers also used administrator credentials to access the TUMonline academic management system and may have accessed names, addresses, dates of birth and other information. The university shut down both systems and began changing passwords while investigating the actual extent of data exfiltration.
Related reports: 8 · last report →
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.