DTU hack affects up to 200,000 Danes – university issues warning
Up to 200,000 current and former users of DTU may be affected by a serious cyber attack. The university is urging heightened vigilance against suspicious communications.
DTU warns users after cyber attack: up to 200,000 may be affected
Up to 200,000 current and former users of the Technical University of Denmark (DTU) may have had their personal information compromised following a cyber attack on the university. B.T. reported on Friday that hackers may have gained access to DTU's identity and access management system.
The attack is described by DTU itself as "serious". The affected individuals include employees, students, guests and partners who have been associated with the university from 2003 to the present day.
Heightened vigilance recommended
In a press release, DTU is urging all potentially affected individuals to be "particularly vigilant" regarding suspicious emails, text messages and telephone calls – even in cases where the sender appears to be familiar with information about the recipient or their connection to DTU.
The university has issued a number of specific recommendations:
- Do not disclose passwords or other confidential information in response to unexpected communications.
- Do not approve unexpected login or authentication requests.
- Change passwords on services where your DTU password has been reused.
- Consider setting up a credit alert on your CPR number via Borger.dk.
DTU also highlights a particular risk for individuals with name and address protection: "If information about your name and address has fallen into the wrong hands, it can increase the risk of unwanted contact, tracking or other harassment."
Notifications via e-Boks – but not everyone can be reached
The university states that current and former employees, and nearly all current and former students for whom DTU has a CPR number, will be notified directly via e-Boks "as soon as possible".
Guests, partners and relatives are, however, more difficult to contact, as DTU does not have CPR numbers for these groups. This is precisely why the university has chosen to go public with information about the attack – in order to "reach individuals whom DTU is unable to contact directly", the press release states.
Source: B.T.