A security breach at the Technical University of Munich (TUM) exposed the passwords of every user registered on its myTUM portal. Attackers obtained stolen sysadmin credentials and used them to compromise TUMonline, the campus management system, forcing the IT team to take it offline. Accounts protected by multi‑factor authentication (MFA) were not affected, but other personal data—names, addresses, dates of birth, work addresses, phone numbers, student IDs, degree programmes and semester records—may have been accessed. TUM restored access on Monday and urged users to reset passwords via Microsoft 365 or a German electronic ID, and to remain alert for phishing attempts. The university is continuing its investigation into the extent of the data exposure. www.theregister.com/cyber-crime/2026/…/5308380