Vanderbilt University responds to ransomware attack and data theft claim

Vanderbilt University in Nashville, Tennessee, confirmed on Monday that it is responding to an active cybersecurity incident that may impact its devices, systems, and cloud-based services. BleepingComputer, the Nashville Banner, The Washington Post, and DysruptionHub all reported on the breach. BleepingComputer reported that the BYOD ransomware gang claimed responsibility for the attack. The group claims it encrypted university databases and stole sensitive employee, student, and research data. [1][2][3][4][5]

The Washington Post and DysruptionHub both reported that Vanderbilt University urged users to shut down devices following the incident. BleepingComputer added that the university warned of potential disruption to campus devices, internal systems, and cloud services while response teams manage the situation. [1][3][4]

As FTMQ Security reported earlier, the BYOD ransomware group has previously targeted higher education institutions and corporate entities. The group claimed responsibility for a security incident at Michigan State University that forced campus-wide password resets and resulted in the alleged theft of personal records. It also previously shut down the hospital system at the University of New Mexico and claimed a data breach exposing thousands of subscriber records from Trump Mobile. [8][9]

Vanderbilt University is a private research university founded in 1873. It enrolls approximately 7,000 undergraduate students alongside more than 6,000 graduate and professional students, and conducts over 1 billion dollars in annual research and development expenditures. [5][7]