Unfortunately, we must inform you of an IT security incident at the Technical University of Munich (TUM) that may also affect your personal data as an employee or student. You can find all the latest information on this matter here in this article, which is constantly updated.
Status as of Friday, November 6, 2026, 12:20 p.m.
Unknown individuals attacked the myTUM portal. In the process, they stole passwords for the central login to TUM systems (e.g., login.tum.de, TUMonline, etc.) from everyone who had registered with myTUM. Among these were the login credentials of a system administrator for TUMonline. The attackers used these credentials to launch an attack on our central campus management system, TUMonline. We subsequently took the system offline.
What data is affected?
During the attack, the attackers may have gained access to the following data:
For all affected individuals: the password for your TUM account, your name, your address, and your date of birth
For employees additionally: your work address and your work phone number
For students, additionally: if applicable, your student ID number, your degree program, and the number of semesters you’ve completed
The attackers’ access within TUMonline was largely logged. After analyzing these logs, we currently assume that no other data from TUMonline was compromised, such as grades or college applications. We are continuing to investigate this.
We immediately suspended the affected accounts and temporarily deactivated TUMonline. Based on what we know at this time, we were able to prevent the attack from spreading further. We have reported the incident to the Bavarian State Commissioner for Data Protection and filed a criminal complaint. We are continuing to investigate the incident and will inform you as soon as we know more.
What should you do now?
Change your TUM password. We will provide you with several options to do so by Monday and will let you know how and by when you must change your password. Then, enable multi-factor authentication (MFA). User accounts with MFA were protected from this attack. Instructions will be available by Monday evening at the latest at
If you’ve also used your TUM password for other services outside of TUM, you should definitely change it there as well. These could include your personal email account, online stores, or social media platforms. Always use a unique password for each service.
Be cautious with emails, letters, and phone calls. Fraudsters could use your name, degree program, and address to create messages that appear credible. TUM will never ask you for your password via email, phone, or letter. Do not click on links in suspicious messages. Please report such messages to it-sicherheit spam prevention @tum.de .
If you have any questions regarding this incident, please us at datenschutz-vorfall spam prevention @tum.de . You can reach our Data Protection Officer or our Government-Appointed Data Protection Officer at datenschutz spam prevention @tum.de .
We are very sorry that this incident occurred. We are working hard to protect our systems even better. Best regards, Dr.-Ing. Alexander Braun Executive Vice President for IT Systems & Services Chief Information Officer (CIO) Technical University of Munich
Technical University of Munich
Corporate Communications Center
presse spam prevention @tum.de
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
