Science & Tech · Cybersecurity · 6 hrs ago
Cyberattack exposes passwords for all registered TUM portal users
Attackers stole passwords for all registered users of the myTUM portal at the Technical University of Munich in Germany.
They also stole an administrator’s credentials and used them to attack TUMonline, the university’s campus management system, which was taken offline.
TUM restored access to TUMonline on Monday and is directing users to reset their passwords.
The university says attackers may also have accessed personal details, including names, addresses and dates of birth, as well as some employee and student records.
TUM currently believes no other TUMonline data was compromised, including grades or college applications, but its investigation is continuing.
The university warns users to watch for phishing and fraud and to change any passwords they reused on other services.
Attackers stole central login passwords belonging to everyone registered with the Technical University of Munich’s myTUM portal.
They used an administrator’s credentials in a follow-on attack on TUMonline, the university’s campus management system.
TUM took TUMonline offline and restored access on Monday morning, allowing users to change their passwords.
The university said names, home addresses and dates of birth may also have been accessed, but it currently assumes no other TUMonline data was compromised.
TUM disclosed the attack on November 6 and is continuing to investigate.
- Who
- Attackers targeted the Technical University of Munich (TUM) and stole passwords for all registered myTUM users.
- What
- The attackers used an administrator’s credentials to attack TUMonline. Some personal information may also have been accessed.
- When
- TUM disclosed the attack on November 6. TUMonline access was restored on Monday morning.
- Where
- TUM’s myTUM portal and TUMonline campus management system.
- Why
- Not stated
This story does not have two clearly opposing sides.
Attackers targeted myTUM and stole central login passwords, including an administrator’s credentials.
The attackers used the administrator’s credentials to launch a follow-on attack on TUMonline, which TUM took offline.
TUM disclosed the attack.
TUM restored access to TUMonline, allowing users to change their passwords.
- Affected portal
- myTUM
- Follow-on target
- TUMonline campus management system
- Disclosure date
- November 6
- Potentially exposed data
- Names, home addresses and dates of birth
- TUM students
- 51,954 across its German campuses and TUM Asia in Singapore
- TUM employees
- 12,850
What people are saying
The attackers' access within TUMonline was largely logged
After analyzing these logs, we currently assume that no other data from TUMonline was compromised, such as grades or college applications. We are continuing to investigate this.