#23 · Cybersecurity · Security · IsosLinuxNews
The University of Vanderbilt Suffers a BYOD Ransomware Attack, It is Claimed That Data Was Stolen
The University of Vanderbilt reported that it is responding to a cyberattack attributed to the ransomware group BYOD, which claims to have encrypted its databases and stolen sensitive information from students, employees, and researchers.
The University of Vanderbilt reported that it is responding to a cyberattack attributed to the ransomware group BYOD, which claims to have encrypted its databases and stolen sensitive information from students, employees, and researchers.
As part of its response, the university instructed students, staff, and employees to power down university devices, disconnect them from the university's Wi-Fi network, and monitor for any suspicious activity. Signs of compromise include unexpected pop-ups, unusual changes in files or permissions on cloud storage platforms, missing or modified files, unknown applications, and unexpected authentication requests.
The ransom note includes a link to the BYOD leak site and contact information for negotiating with the ransomware group. Although the ransom note and a shared video suggest that BYOD is responsible for the attack, the university has not officially confirmed the group's involvement or whether the devices were encrypted.
Written automatically with AI.
Key points
The attack is attributed to the ransomware group BYOD, which has launched similar operations against other institutions, including the University of New Mexico Health Sciences Center. The ransom note reveals that the group claims to have stolen sensitive data, including Social Security numbers, full names, email addresses, phone numbers, student and employee records, and threatens to release the information if not negotiated with the attackers.
Who is it for?
The primary audience are students, staff, and employees of Vanderbilt University, as well as users of university devices and services.
Our recommendation
Editorial suggestion: University users are advised to follow the administration's instructions and report any suspicious activity without attempting to investigate on their own.
IsosLinux