The Technical University of Munich (TUM) published a notice dated 6 November 2026 (status as of Friday, November 6, 2026, 12:20 p.m.; no zone abbreviation on the page) saying unknown individuals attacked the myTUM portal and in the process stole passwords for the central login to TUM systems (for example login.tum.de and TUMonline) from everyone who had registered with myTUM.

TUM says among those credentials were the login credentials of a system administrator for TUMonline, and that the attackers used these credentials to launch an attack on the central campus management system TUMonline; TUM subsequently took the system offline.

TUM says that during the attack the attackers may have gained access to: for all affected individuals, the password for the TUM account, name, home address and date of birth; for employees additionally work address and work phone number; for students additionally, if applicable, student ID number, degree program and number of semesters completed.

TUM says the attackers' access within TUMonline was largely logged and that after analysing those logs it currently assumes no other data from TUMonline was compromised, such as grades or college applications, and that it is continuing to investigate.

TUM says it immediately suspended the affected accounts and temporarily deactivated TUMonline, that based on what it knows it was able to prevent the attack from spreading further, that it has reported the incident to the Bavarian State Commissioner for Data Protection and filed a criminal complaint.

TUM says user accounts with multi-factor authentication (MFA) were protected from this attack, and asks affected people to change their TUM password and enable MFA; the notice is signed by Dr.-Ing. Alexander Braun, Executive Vice President for IT Systems & Services and CIO. (source: TUM)

UPDATE (10 Nov 2026): TUM's notice, in an update with status as of Monday, November 9, 2026, 7:00 a.m., says TUM IT Security has re-enabled password changes in TUMonline; in a further update with status as of Monday, November 9, 2026, 17:25, TUM says TUMonline is back up and running and that before logging in users must first change their password as a precaution and set up two-factor authentication (the page gives no time zone abbreviation). (source: TUM)