Denmark's DTU Suffers Data Breach Affecting Up to 200,000 People via Identity Management System

Attack via the DTUBasen Identity Management System According to disclosures from DTU, attackers utilized compromised credentials to gain unauthorized access to the institution’s Identity and Access Management (IAM) system, known as "DTUBasen." By infiltrating this central system, the threat actors extracted large volumes of personal user records, affecting hundreds of thousands of individuals stored in the database. Details of Compromised Data The information stolen by the hackers includes sensitive and essential personal records: • Danish Personal Identification numbers (CPR) • Full names • Current addresses • Next-of-kin contact information The incident directly impacts a broad range of members across the university's ecosystem, including current students, staff members, and DTU alumni. The Risk of a Single Point of Failure This attack on the IAM system underscores the inherent risk of a single point of failure within IT architectures. When a unified identity management system is compromised, attackers can easily access extensive repositories of sensitive data all at once. This confidential data—particularly the CPR numbers—poses significant risks of identity theft or highly targeted, advanced phishing campaigns aimed at the affected individuals. Precautions and Continued Monitoring Impacted students, staff, and alumni are urged to exercise heightened vigilance regarding suspicious messages, emails, or contacts attempting to elicit further personal details. Meanwhile, the incident serves as a critical warning for IAM security administrators and higher education institutions globally to re-evaluate their defense measures and enforce stringent access monitoring. Source: BleepingComputer Read the original source: https://www.bleepingcomputer.com/news/security/danish-university-dtu-breach-exposes-data-of-up-to-200-000-people/