Vanderbilt restores systems after attack; BYOD claims data theft
Original title: Vanderbilt restores systems after cyberattack as hackers claim data theft
The university has not confirmed what data was accessed and says full restoration could take several weeks.
Vanderbilt University is bringing campus systems back online after a cybersecurity incident claimed by the BYOD ransomware group. According to Bleeping Computer, BYOD says it encrypted databases, obtained more than one million Social Security numbers plus names, contact details, student and employee records, and research data, and holds a domain controller and backups. Vanderbilt’s November 10 update lists Wi-Fi, Okta, email, and course registration among restored services, while other systems remain restricted. How access was gained is undisclosed.
Unconfirmed: BYOD’s claims about encryption, more than one million Social Security numbers, a domain controller, and backups are unverified; Vanderbilt has not confirmed what data was accessed.
- Vanderbilt serves more than 13,800 students in Nashville, Tennessee.
- Restored services include Campus Wi-Fi, Okta, Outlook email, Brightspace, Zoom, and YES.
- BYOD has threatened to release data it claims to have stolen.
- The claimed Social Security number count is not a verified victim count.
Impact: Claimed theft of SSNs, records, research data, and backups
- 1.Follow Vanderbilt’s latest IT guidance.
- 2.Watch for messages asking to restore access, disclose passwords, or approve unexpected logins.
- Threat actors
- BYOD
- Victims
- Vanderbilt University
- Countries
- United States
From the original article
2 min read at malwarebytes.com
Vanderbilt University is restoring campus technology, but has not confirmed the attackers’ claims of stolen student and employee data.
By @MetallicaMVP · malwarebytes.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.