[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f36poRN19-indNx4kFQQZoc9R8O72659aX1O_RXltVRY":3},{"article":4,"iocs":43,"watch_terms":44,"solutions":45,"lesson":132},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":20,"category":21,"article_tags":25},"c97356cc-37ba-44c5-ae77-07ae32ae6560","Danish university DTU breach exposes data of up to 200,000 people","danish-university-dtu-breach-exposes-data-of-up-to-200-000-people-c24f61","The Technical University of Denmark (DTU) says information belonging to up to 200,000 users may have been exposed after hackers accessed its identity and access management system and downloaded a large amount of data. [...]","The Technical University of Denmark (DTU) has reported a data breach affecting up to 200,000 users after hackers accessed its identity and access management system, DTUBasen. The attackers used compromised credentials to download a significant amount of user data, potentially including Danish civil registration numbers, names, addresses, and next-of-kin information. DTU warns that this data could be used for identity fraud and phishing attacks.","Danish university DTU breach exposes data of up to 200,000 people.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fdanish-university-dtu-breach-exposes-data-of-up-to-200-000-people\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2026\u002F10\u002F03\u002FDTU.png","2026-10-03T14:35:20+00:00","2026-10-03T16:00:09.273575+00:00",7,[17],{"name":18,"type":19},"DTUBasen","product","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":20,"icon":22,"name":23,"slug":24},null,"Breaches","breaches",[26,31,33,38],{"category":27},{"id":28,"icon":22,"name":29,"slug":30},"2c8f44d4-b56e-47cf-9677-04f22c9ee78d","Identity & Access","identity-access",{"category":32},{"id":20,"icon":22,"name":23,"slug":24},{"category":34},{"id":35,"icon":22,"name":36,"slug":37},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":39},{"id":40,"icon":22,"name":41,"slug":42},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[18],{"controls":46,"vendors":131},[47,76,102],{"slug":48,"name":49,"problem":50,"products":51},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",[52,60,68],{"vendor_slug":53,"vendor_name":54,"vendor_logo":55,"product_slug":56,"product_name":57,"url":58,"description":59},"acalvio","Acalvio","\u002Fvendor-logos\u002Facalvio.png","shadowplex-identity-protection","ShadowPlex Identity Protection","https:\u002F\u002Fwww.acalvio.com\u002Fproducts\u002Fidentity-protection\u002F","Decoy accounts and credentials that expose identity attacks and credential misuse early.",{"vendor_slug":61,"vendor_name":62,"vendor_logo":63,"product_slug":64,"product_name":65,"url":66,"description":67},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-itdr","Huntress Managed ITDR","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fmanaged-itdr","Managed detection of suspicious activity in Microsoft 365 and Entra ID.",{"vendor_slug":69,"vendor_name":70,"vendor_logo":71,"product_slug":72,"product_name":73,"url":74,"description":75},"okta","Okta","\u002Fvendor-logos\u002Fokta.png","identity-threat-protection","Okta Identity Threat Protection","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fidentity-threat-protection\u002F","Continuous risk assessment of sessions after login, with automatic actions such as ending sessions.",{"slug":77,"name":78,"problem":79,"products":80},"encryption-key-management","Encryption and key management","Stolen data stays unreadable, and the keys stay under your control.",[81,89,94],{"vendor_slug":82,"vendor_name":83,"vendor_logo":84,"product_slug":85,"product_name":86,"url":87,"description":88},"thales","Thales","\u002Fvendor-logos\u002Fthales.png","luna-hsm","Thales Luna HSM","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fhardware-security-modules","Hardware security modules for protecting cryptographic keys.",{"vendor_slug":82,"vendor_name":83,"vendor_logo":84,"product_slug":90,"product_name":91,"url":92,"description":93},"ciphertrust","CipherTrust Data Security Platform","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fdata-security-platform","Data discovery, encryption and central key management across on-premises and cloud.",{"vendor_slug":95,"vendor_name":96,"vendor_logo":97,"product_slug":98,"product_name":99,"url":100,"description":101},"hashicorp","HashiCorp","\u002Fvendor-logos\u002Fhashicorp.png","vault","HashiCorp Vault","https:\u002F\u002Fwww.hashicorp.com\u002Fen\u002Fproducts\u002Fvault","Secrets management with short-lived credentials and encryption as a service.",{"slug":103,"name":104,"problem":105,"products":106},"incident-response-retainer","Incident response retainer","Experts are on call before the worst day, not searched for during it.",[107,115,123],{"vendor_slug":108,"vendor_name":109,"vendor_logo":110,"product_slug":111,"product_name":112,"url":113,"description":114},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","unit-42-retainer","Unit 42 Retainer","https:\u002F\u002Fwww.paloaltonetworks.com\u002Funit42\u002Fretainer","Incident response retainer with Unit 42, including preparation services.",{"vendor_slug":116,"vendor_name":117,"vendor_logo":118,"product_slug":119,"product_name":120,"url":121,"description":122},"truesec","Truesec","\u002Fvendor-logos\u002Ftruesec.png","truesec-incident-response","Truesec Incident Response","https:\u002F\u002Fwww.truesec.com\u002Fservice\u002Fincident-response","Incident response team with a retainer option.",{"vendor_slug":124,"vendor_name":125,"vendor_logo":126,"product_slug":127,"product_name":128,"url":129,"description":130},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","incident-response","CrowdStrike Incident Response","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fservices\u002Fincident-response\u002F","Incident response services, available on retainer.",[],{"slug":133,"title":134,"body":135,"framework_refs":136,"framework_notes":149},"compromised-credentials-expose-200000-dtu-users-personal-data","Compromised Credentials Expose 200,000 DTU Users' Personal Data","Attackers gained access to DTU's identity and access management system (DTUBasen) using compromised credentials, enabling them to exfiltrate sensitive personal data on up to 200,000 individuals, including civil registration numbers and next-of-kin information. The root failure lies in insufficient access controls — compromised credentials alone should not be enough to download large volumes of sensitive records without triggering safeguards. This incident highlights how a single point of credential failure in a central IAM system can cascade into a massive data breach. The exposure of civil registration numbers creates serious long-term risks for identity fraud and targeted phishing, making this breach particularly damaging for affected individuals.",[137,138,139,140,141,142,143,144,145,146,147,148],"CIS Control 5 – Account Management","CIS Control 6 – Access Control Management","CIS Control 13 – Network Monitoring and Defense","NIST SP 800-53 AC-2 – Account Management","NIST SP 800-53 AC-6 – Least Privilege","NIST SP 800-53 IA-5 – Authenticator Management","NIST SP 800-53 AU-6 – Audit Review, Analysis, and Reporting","GDPR Article 5(1)(c) – Data Minimization","GDPR Article 25 – Data Protection by Design and by Default","GDPR Article 33 – Notification of a Personal Data Breach","NIST CSF PR.AC-1 – Identities and Credentials Management","ISO\u002FIEC 27001 Annex A.9 – Access Control",{}]