Teollimi

Technical University of Denmark (DTU) data breach

Was I affected?

Technical University of Denmark (DTU) confirmed a breach affecting about 200,000 people, exposing names, national id numbers, addresses and email addresses. You may be affected if you have been an employee, student, guest or external partner at DTU at any time since 2003, or are listed as someone's next of kin there.

Technical University of Denmark (DTU) breach facts
AnnouncedOct 2, 2026
CountryDenmark
People affected200,000
Data exposedNames, National ID numbers, Addresses, Email addresses, Phone numbers and Other details
StatusConfirmed by the company or a regulator filing

What happened

The Technical University of Denmark said on October 2, 2026 that attackers compromised DTU user profiles, used them to get into its identity and access management system, DTUBasen, and downloaded a large amount of data going back to 2003. DTU says it cannot determine exactly what was downloaded or how many people are affected, but DTUBasen holds information on about 40,000 active and 160,000 former users, so up to 200,000 people may be involved. For active users the data may include CPR numbers, full names, home addresses, profile pictures, work details and next-of-kin names and phone numbers; for former users it still includes CPR numbers and names. The breach was reported to the Danish Data Protection Agency, and people with a CPR number on file are being notified via e-Boks.

What should I do?

  1. Be alert to emails, texts and calls that seem to know about your link to DTU, and do not share passwords or approve login requests you did not start.
  2. Change your password on any service where you reused your DTU password.
  3. Consider registering a credit warning (kreditadvarsel) against your CPR number at borger.dk.
  4. If you have name and address protection, take extra care and see sikkerdigital.dk for guidance.
XRedditWhatsApp

More data breaches in Denmark →

Check the other services you use →

Sources