On Friday, October 2, 2026, the Technical University of Denmark (DTU) reported a cyberattack on its identity and rights management system. Unauthorized individuals accessed the user database, potentially affecting up to 200,000 current and former users, including employees, students, guests, and partners. The compromised data may include CPR numbers, names, and for active users, addresses and phone numbers. DTU has contained the attack and is working to determine the scope. The incident has been reported to the Danish Data Protection Agency and relevant authorities. Affected individuals will be notified via e-Boks.
We’ll perform a deep-dive analysis of all sources and publicly available external materials, then prepare a structured timeline of events, an in-depth report explaining the background and context, and multiple perspectives.
