Technical University of Munich: attackers captured the central-login passwords of everyone who signed in to the legacy myTUM portal, took a TUMonline system administrator's credentials and attacked the campus-management system; accounts with MFA were protected

The Technical University of Munich says unknown persons attacked its myTUM portal and captured the passwords for the central login to TUM systems, among them login.tum.de and TUMonline, from all persons who had logged in to myTUM; among them were the access credentials of a system administrator for TUMonline, with which the attackers attacked the central campus-management system TUMonline, which TUM then took off the network (translated from German) (TUM, 2026-11-06). TUM says the attackers may have reached the account password, name, private address and date of birth of everyone affected, plus staff and student details, that the attackers' accesses within TUMonline were largely logged and that it currently assumes no further TUMonline data such as grades is affected, and that accounts with multi-factor authentication were protected in this attack (translated from German) (TUM, 2026-11-06). heise, quoting a TUM spokesperson, reports that the attackers entered through a legacy system and that whether data was exfiltrated is still being investigated, and adds that about 60,000 students and employees are concerned (translated from German) (heise online, 2026-11-06). Neither source states how the passwords were captured at myTUM.