Northwest Iowa Community College Discloses Unauthorized Activity After Weeks of Disruption
Summary
Northwest Iowa Community College said unauthorized activity occurred during a November 2025 disruption and information may have been accessed or downloaded. It later notified 16,004 Iowa residents whose names and Social Security numbers may have been involved.
Key points
- The college said network disruption affected on-campus classes and technology services for nearly two weeks in November and December 2025.
- On Nov. 26, the college said it discovered unauthorized activity; investigators determined information may have been accessed or downloaded from Nov. 24 to 26.
- The college initially described the outages publicly as technical issues, then disclosed the unauthorized activity more than seven months later.
- After reviewing potentially affected records, the college began notifying 16,004 Iowa residents on July 8 that their names and Social Security numbers may have been involved.
- The college said it secured its network, conducted a forensic investigation, strengthened data-security policies and procedures, and offered affected people 12 months of credit monitoring and fraud assistance.
- The intrusion method, any ransomware or extortion involvement, and whether information was misused remain undisclosed; no threat actor or ransom demand has been identified.
Article Details
- Victim Organization
- Northwest Iowa Community College
- Incident Type
- Unauthorized activity involving the college network; the method of intrusion is undisclosed.
- Incident Date
- 2025-11-24
- Data Types Exposed
- Names
- Social Security numbers
- Affected Records
- 16,004 Iowa residents were notified that their names and Social Security numbers may have been involved.
- Operational Impact
- A network disruption lasting nearly two weeks led to canceled on-campus classes and outages affecting Wi-Fi and other digital services. Services were gradually restored in December.
- Ransom Or Extortion
- No ransom demand was disclosed. The college has not disclosed whether ransomware or extortion was involved.
- Claim Status
- confirmed
Products
CanvasIn a Nov. 29 Facebook post, the college said MyPlace, Canvas, Wi-Fi and other digital systems were inaccessible on campus because of technical issues. It said most services remained available off campus except email.MyPlaceIn a Nov. 29 Facebook post, the college said MyPlace, Canvas, Wi-Fi and other digital systems were inaccessible on campus because of technical issues. It said most services remained available off campus except email.