Portal breach at Technical University of Munich exposes user passwords

Tier D · Background noise – Good to know

Who’s exposed: Everyone registered with TUM's myTUM portal

Tier D because: Does not hit tech teams

Reach

Attack

Damage

Fix

Exploited in the wild · Full takeover · Secrets exposed

The Brief

Attackers stole central university login passwords for everyone registered with TUM's myTUM portal.
An admin's stolen credentials were then used to attack a second system.
TUM restored access to its TUMonline campus management system.

Anyone with a TUM account should assume their central login password was exposed. Reusing that password elsewhere puts other services at risk.

Checklist · 3 of 10 yes

No	Hits tech teams	Judgment: myTUM and TUMonline are university campus portals for students and staff, not developer tooling.
No	Core infrastructure	Judgment: a single university's campus portal is not software nearly every team runs.
No	Popular tool	Judgment: a niche university portal, not a widely used framework, tool or platform.
Yes	Exploited in the wild	The Register: attackers stole central login passwords and used an admin's credentials to attack a second system.
No	Public exploit	The Register: no exploit code or proof-of-concept is mentioned in the source.
No	Remote, no login	The Register: the source does not say the attack needed no credentials or user interaction.
Yes	Full takeover	The Register: an admin's stolen credentials were used to attack a second system, implying account takeover.
Yes	Secrets exposed	The Register: attackers stole passwords belonging to everyone registered with the myTUM portal.
No	Supply chain	The Register: the source reports credential theft, not malicious code shipped through a trusted channel.
No	No fix yet	The Register: TUM restored access to TUMonline; no unpatched vulnerability is reported.

First seen 2h ago · 1 source · Full story page · How tiers are decided