{
  "id": 19150087,
  "title": "Portal breach at Germany's top university exposes every registered user's password",
  "url": "https://urgent.news/2026/11/09/portal-breach-at-germanys-top-university-exposes-every-registered",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-11-09T11:44:20.000Z",
  "source": {
    "name": "The Register Science",
    "slug": "the-register-science",
    "url": "https://www.theregister.com/cyber-crime/2026/11/09/portal-breach-at-germanys-top-university-exposes-every-registered-users-password/5308380"
  },
  "original_language": "en",
  "account": "A data breach at Germany's Technical University of Munich (TUM) has exposed the passwords of all users on the university's myTUM portal. The vulnerability, discovered on November 6, allowed attackers to gain access to the university's central login information, including an admin account. This enabled them to carry out a second attack on TUMonline, the university's main campus management system, which was consequently taken offline. TUM confirmed on November 7 that the breach had occurred and that user accounts with multi-factor authentication (MFA) remained secure. The stolen passwords may have also provided access to users' personal data, such as names, addresses, and birthdates. The affected users include 51,954 students and 12,850 staff members across TUM's German and Singapore campuses. TUM is advising users to reset their passwords via Microsoft 365 or use a German electronic ID if they do not have MFA enabled. The university is urging users to watch out for phishing attempts and to change any reused passwords.",
  "summary": "Stolen sysadmin credentials enabled a follow-on attack on the campus management system",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}