Skip to content
Cyberattack on TUM Compromises User Data and Shuts Down Key Systems

Cyberattack on TUM Compromises User Data and Shuts Down Key Systems

First seen 8 Nov 2026, 05:48 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 8, 2026 at 05:48 UTC
  • •Over 60,000 users affected by the breach, including students and staff.
  • •Attackers exploited the legacy myTUM system to access sensitive user data.
  • •TUMonline has been taken offline as a precautionary measure.

On November 6, 2026, the Technical University of Munich (TUM) reported a cyberattack that compromised the myTUM portal, leading to the theft of passwords, names, addresses, and dates of birth of all registered users. Attackers gained access through the legacy myTUM system and used stolen credentials from a TUMonline system administrator to target the campus management system, TUMonline. The university has since taken TUMonline offline and blocked affected accounts. Investigations are ongoing, but initial assessments suggest that no further data, such as grades or admission applications, was accessed. TUM has reported the incident to the Bavarian data protection commissioner and filed a criminal complaint. Users are advised to change their passwords and enable multi-factor authentication once available. The attack is believed to have started around November 2, although this has not been confirmed.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 1h ago How this analysis works

Timeline

2026-11-02
Possible start of the attack
Internal communications suggest the cyberattack may have begun on this date, although TUM has not confirmed it.
Pasqualepillitteri.It
2026-11-06
TUM confirms cyberattack
TUM announced the breach affecting myTUM and TUMonline, leading to the shutdown of these systems.
Tum.De
2026-11-08
Ongoing investigation and updates
TUM continues to investigate the breach and has provided updates regarding the status of affected accounts and systems.
Heise.de

More articles in this cluster (5)

Following this threat?

Track Ludwig-Maximilians-Universität in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (10)

1 / 4

Common questions

What data was compromised?
The attackers accessed passwords, names, addresses, dates of birth, and potentially other personal information of users registered on myTUM.
What should affected users do?
Users should change their TUM passwords and enable multi-factor authentication as soon as options are provided.
Is there a timeline for restoring TUMonline?
TUM has not provided a specific timeline for when TUMonline will be restored, but it is expected to come back online in stages.