Vanderbilt University: Ransomware Forces Digital Lockdown
The university ordered all users to disconnect from its network after the BYOD group claimed theft of over one million Social Security numbers.
By Carlos Rousseau ·
Vanderbilt University ordered all faculty, staff, and students to disconnect from the school network on Monday morning to contain a spreading ransomware attack. The university issued a broad directive requiring individuals to shut down university devices and drop the connection to the campus Wi-Fi immediately. This move follows the detection of malicious software moving through computers, files, and digital infrastructure.
The university confirmed the incident around 11 a.m. on Monday. An announcement on Vanderbilt’s social media stated that the Information Technology team is investigating and working to contain the situation. The message asked the university community to remain vigilant and take immediate action if they noticed unusual activity on their devices.
Users reported tech problems immediately after logging into Vanderbilt systems that morning. One individual described an unexpected update that appeared to come from Vanderbilt IT. This update rewrote files into a “.byod” format, a method previously seen in attacks on a New Mexico hospital and Michigan State University. Another person told the Nashville Scene they lost access to research saved on university systems and are now relying on copies backed up to personal devices.
A cyberattack tracking website identified the perpetrator as the “BYOD” group. The database shows this group has hacked 17 targets since September. According to the same source, hackers obtained extensive personal information from Vanderbilt, including student records and more than 1 million Social Security numbers.
The incident is part of a series of similar hacks at universities across the country in recent weeks. Tech professionals have publicly advised Vanderbilt users to shut down devices immediately and avoid the network entirely. The scale of the disruption appears widespread enough to impact cloud-based services and core university operations.
Vanderbilt’s IT team is currently focused on investigating the breach and containing the spread of the malware. The university has not provided a specific timeline for restoring normal network access. Users are instructed to stay off the network until further notice.
