IT Security Incident at TUM

The Technical University of Munich has confirmed that unknown attackers breached its myTUM portal and stole the central-login passwords of everyone registered there, including a TUMonline administrator whose credentials the attackers used against the central campus management system, which the university took offline. Names, home addresses and dates of birth may also have been accessed; TUM has suspended the affected accounts, reported the incident to the Bavarian data protection commissioner and filed a criminal complaint, and says accounts with MFA enabled were not affected.