Breaches · 2h ago
The Technical University of Denmark (DTU) says attackers got into its identity and access management system and downloaded a large amount of data, exposing information belonging to as many as 200,000 people. The university has not said the full scope of what was taken, but the incident is already framed as an identity-system compromise, not just a records leak.
That matters because an identity platform is the gatekeeper for other services: if it holds login data, session material, or reset paths, a breach there can give an intruder more than user records. It can become a route into connected systems that trust the same identity layer.
For any organization that centralizes access in one IAM or single sign-on stack, the exposure does not end with the breached database. The trust anchor itself is what sits in danger, and downstream systems may inherit risk even after the initial incident is contained.
2 sources covering this story
The Record from Recorded Future
Data breach at Denmark’s national population register exposes 8.8 million people
Denmark is investigating a data breach affecting approximately 8.8 million people after unauthorized users gained access to its national population register.
Danish university DTU breach exposes data of up to 200,000 people
The Technical University of Denmark (DTU) says information belonging to up to 200,000 users may have been exposed after hackers accessed its identity and access management system and downloaded a large amount of data.
Part of the PlainSec briefing for 2026-10-05