Danish university DTU breach exposes data of up to 200,000 people

DTU reported a credential-based breach of its DTUBasen identity and access management system that may have exposed personal data for up to 200,000 people (about 40,000 active users and 160,000 former users), including CPR numbers, names, addresses, profile pictures, next-of-kin contact details, and employment information; the university is notifying affected individuals via e-Boks and warning of increased risk of identity fraud and phishing.