Cyberattacks on Universities: Recent Breaches, Trends, and Protective Measures
Summary
An overview of university cyberattacks, including major breaches, reported education-sector trends, the risks of ransomware and data theft, and basic steps schools can take to improve security.
Key points
- The article identifies phishing, ransomware, and DDoS as common threats to universities, which hold sensitive data and may face significant disruption after an attack.
- A 2023 breach at the University of Michigan affected about 230,000 students, alumni, and employees; attackers stole sensitive personal and health information, and the university shut down its network for four days.
- The article says the Akira ransomware group claimed to have stolen 430 GB of data from Stanford University's Department of Public Safety and later made a download link available; Stanford did not disclose whether it paid a ransom.
- Cl0p exploited MOVEit in a 2023 campaign affecting multiple organizations, including universities such as UCLA, Rutgers, and Missouri; some reported student and faculty information posted online.
- A Netwrix survey of 1,309 IT and security professionals found that 77% of education-sector organizations reported an attack in the prior 12 months, up 8% from 2023.
- Suggested precautions include strong authentication and MFA, keeping software updated, and educating faculty and students about phishing.
Article Details
- Topic
- Cyberattacks on universities, including ransomware, data breaches, and the risks and protective measures associated with attacks on educational institutions.