Vanderbilt Restores Systems After Cyberattack as BYOD Claims Data Theft

Summary

Vanderbilt is restoring systems after a cyberattack claimed by BYOD. The group alleges it stole sensitive data, but the university has not confirmed what data, if any, was accessed; some systems remain restricted.

Key points

Vanderbilt says campus Wi-Fi, email, Okta, CampusPrint, Brightspace, Zoom, and course registration services are available.
Other systems and applications remain restricted, and Vanderbilt says full restoration could take several weeks.
BYOD claims it encrypted databases and obtained more than one million Social Security numbers and other personal, student, employee, and research data; these claims are unverified.
Vanderbilt has not confirmed how many people may be affected and says it is still determining what data, if any, was accessed.
The article advises students and staff to follow university IT guidance and watch for suspicious messages, password requests, and unexpected login approvals.

Article Details

Victim Organization: Vanderbilt University
Incident Type: Cyberattack claimed by the BYOD ransomware group; BYOD claims it encrypted Vanderbilt's databases.
Data Types Exposed: BYOD claims it obtained Social Security numbers, names, email addresses, telephone numbers, student and employee records, and research data. Vanderbilt has not confirmed what data, if any, was accessed.
Affected Records: BYOD claims it obtained more than one million Social Security numbers. Vanderbilt has not confirmed the number of affected people, and the claimed count is not a verified count of affected individuals.
Operational Impact: Some campus systems and applications were available again, while others remained restricted. Vanderbilt said fully restoring normal operations could take several weeks.
Ransom Or Extortion: BYOD threatened to release the data it claims to have stolen. The article does not report a ransom demand.
Claim Status: claimed

Threat Actors

BYODVanderbilt University identified BYOD as the ransomware group claiming the cyberattack. BYOD claims it encrypted databases and obtained data; Vanderbilt has not confirmed the claimed access or theft.

Products

OktaOkta: Continue to use multifactor authentication (MFA)OutlookVanderbilt email (Outlook): Vanderbilt email is available on Vanderbilt and personal devices

Industries

Educationand professional students across 12 schools and colleges, with programs ranging from engineering and education to law, medicine, and nursing. Its combination of teaching and research means its systems support not ResearchVanderbilt University is a private research university in Nashville, Tennessee. Founded in 1873, it now serves more than 13,800 undergraduate, graduate, and professional students across 12 schools and colleges, with