Vanderbilt shuts campus devices after BYOD ransomware breach claim
Original title: Vanderbilt University Shuts Down Campus Devices After BYOD Ransomware Group Claims Network Breach
The university has not confirmed theft; BYOD claims more than one million Social Security numbers and compromised backups.
On November 9, 2026, Vanderbilt University told students, faculty and staff to shut down university devices and disconnect from campus Wi-Fi during an active incident. The BYOD ransomware group claimed it locked databases and stole student, employee and research data. Vanderbilt has not confirmed the group or the theft. Wi-Fi later returned, but most systems stayed restricted, and classes were set to continue on November 10.
Unconfirmed: BYOD’s theft, backup and domain-controller claims are unverified, and Vanderbilt has not confirmed the group’s involvement.
- BYOD claimed names, emails, phone numbers, research data and domain-controller access.
- The group threatened release and further disruption unless the university negotiated.
- Local reporting described files changing to the .byod extension.
- By 7:15 p.m. on November 9, campus Wi-Fi was available again.
- Vanderbilt has not identified the entry point or confirmed encryption scope.
Impact: Claimed database lock and theft of student, employee and research data
- 1.Shut down an affected device and contact the IT service desk from another device or by phone.
- 2.Do not click links, open attachments, or attempt repairs on a suspicious device.
- 3.Watch for unexpected pop-ups, missing files, unfamiliar applications, and unusual login requests.
- Threat actors
- BYOD
- Victims
- Vanderbilt University
From the original article
2 min read at cybersecuritynews.com
Vanderbilt University told students, faculty, and staff to shut down university devices and disconnect from campus Wi-Fi on November 9, 2026, while its IT team investigated an active cybersecurity incident. The warning came as the BYOD ransomware group claimed it had locked university databases and stolen sensitive student, employee, and research data. Vanderbilt has not […]
By Abinaya · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.