Technical University of Denmark (DTU) Suffers Data Breach, Exposing Information of 200,000 Users

The Technical University of Denmark (DTU) experienced a significant data breach in early October 2026, compromising the personal information of up to 200,000 current and former users. Attackers gained unauthorized access to DTUBasen, DTU's identity and access management (IAM) system, by exploiting legitimate user credentials. The exposed data, potentially dating back to 2003, may include Danish civil registration numbers (CPR), full names, home addresses, profile pictures, work email addresses, job titles, office locations, and next-of-kin details. DTU publicly disclosed the breach on October 2, 2026, and is investigating the incident with external specialists.