Vanderbilt takes systems offline after a cyber incident
Original title: Vanderbilt University Takes Systems Offline After Cyber Incident
Classes resumed November 10, but most applications stay restricted; BYOD claims it stole over one million SSNs.
Vanderbilt University said it was responding to an active incident from 10:45 a.m. CST on November 9 that may affect devices, systems and cloud services. It asked people to shut down university devices and leave campus WiFi. A 7:15 p.m. update said classes, student services and WiFi were operating from November 10, while most systems and applications remain restricted. Venarix said the BYOD ransomware gang listed the university; Vanderbilt has not named a cause or perpetrator.
Unconfirmed: Vanderbilt has not confirmed the incident type or BYOD's data-theft claims.
- The university disclosed the response at 10:45 a.m. CST on November 9.
- Student newspaper said IT staff warned that school-issued computers were unsafe.
- BYOD claims locked databases, research data and domain-controller access.
- Vanderbilt is working with government agencies and other partners.
Impact: Most university systems and applications remain restricted.
- 1.Shut down university devices and disconnect from university WiFi.
- 2.Watch for unexpected pop-ups, file changes, or authentication requests.
- Threat actors
- BYOD
- Victims
- Vanderbilt University
- Organizations
- Venarix
From the original article
2 min read at infosecurity-magazine.com
The BYOD ransomware group has claimed to have locked the university’s databases and stolen sensitive data from its systems
By James Coker · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.