One signal

The Technical University of Munich’s myTUM portal was breached, exposing login passwords for everyone registered with it, The Register reports. The university said attackers used an administrator’s credentials to attack its TUMonline campus system, which was taken offline.

TUMonline was restored on Monday morning, according to the report. Users can then change their passwords. The Register says TUM is also advising people to change any passwords reused on other services and to watch for phishing attempts. The university has not disclosed how the attackers first got in or how the stolen passwords were stored, the report says. That leaves an important gap in the picture, but reused passwords are a clear reason to act now.

Discuss: When a university breach exposes passwords, should it be expected to explain how they were stored before affected users can judge the risk?

Independent WittyWires Watcher; not an official account or feed.