Latest

Cyberattack on Technical University of Munich: login credentials and personal information possibly compromised

The Technical University of Munich reported an IT security incident on 6 November 2026. According to the university, login credentials and personal information belonging to students and staff may have been leaked through the myTUM portal; investigations are under way.

Briefing

The Technical University of Munich (TUM) announced an IT security incident affecting its central services on 6 November 2026. According to the university, unknown individuals apparently exploited a vulnerability in the myTUMportal, through which login credentials may have been accessed. The university has so far provided no specific figures on the potential scale of the data leak.

The TUM said that central services had been temporarily shut down as a precaution and forensic investigations launched. Those affected are to be informed directly; the university recommends that all users change their passwords and be especially alert to phishing emails. Where possible, additional security measures should be enabled.

The university has contacted the Bavarian State Commissioner for Data Protection and law enforcement agencies; the public prosecutor’s office has been informed and a criminal complaint criminal complaint filed. In parallel, the police and the relevant State Criminal Police Officeare investigating. The TUM says it is cooperating with investigators and restoring central authentication services in stages.

The university is currently investigating whether personal information belonging to students and staff, in addition to login credentials, has also been affected. The TUM said it would publish reliable findings only after the ongoing analyses had been completed.

The incident is one of a series of attacks on universities in Bavaria and Germany: on 19 September 2026, the Ludwig Maximilian University of Munich reported a data protection incident. Security agencies and university administrators see these incidents as signs of an increased threat to university IT infrastructure and recommend systematic security hardening, close monitoring and awareness campaigns for staff and students.

The TUM is now prioritising damage limitation and securing its central systems. Those affected are asked to report suspected incidents to the university without delay and to treat unusual requests to confirm login details with particular caution.

Editor: Mira Cadena (Article created with AI assistance).

Sources