Hacker attack at DTU could affect up to 200,000 people

"A large amount of data" has been downloaded from a system at Danish university DTU after a hacker attack targeting its user database.

The university, which primarily trains engineers, made the announcement in a press statement on Friday.

Up to 200,000 former and current users of the university's system could be affected by the data breach, including current and former staff, students, guests, and other university collaborators who have used the system.

This could include information such as CPR numbers and full names, with the addresses, profile pictures and phone numbers of active users also potentially included in the breach.

DTU said that it could not currently confirm exactly how many people this could affect or what information might have been downloaded. It also did not say who is believed to be behind the attack.

"This is a serious attack against DTU and we apologise sincerely for the uncertainty this has caused for the people whose data may be affected. Our first priority has been to assess the size of the breach, limit the consequences and ensure that those who are affected are informed and aware of how to respond."

"Our own investigation and those of the relevant authorities continue and we will provide information openly and as soon as we know more."

In the statement, the university said that the hackers compromised DTU profiles and used them to access the DTUBasen system. This means that information stretching as far back as 2003 could be affected.

"This information could make phishing attempts or other misuse appear more believable," the statement reads.

DTU has reported the incident to the relevant authorities and is carrying out its own investigation.

If you are a current student, employee, guest or collaboration partner at DTU or have been since 2003, then you may be affected, according to the university.

If you are living under a protected name or address then you should be extra cautious, it says, as this data may have been leaked.