Vanderbilt Orders Digital Lockdown
The university instructed its community to disconnect devices after a BYOD ransomware strain spread through its systems.
By Samir Doyle ·
Vanderbilt University ordered all faculty, staff, and students to disconnect from its network on Monday morning to stop the spread of malicious software. The university issued the directive as the attack moved through its digital infrastructure, forcing a temporary halt to normal digital operations.
The incident involves a specific strain of ransomware known as BYOD. This software rewrites files into a unique file format, a tactic seen in recent attacks on a New Mexico hospital and Michigan State University. The university confirmed it was responding to an active cybersecurity incident that could affect its devices, systems, and cloud-based services.
Faculty and students reported immediate technical issues after logging in on Monday. One user described an unexpected update from the IT department that converted files into the BYOD format. Another individual lost access to research data stored on university systems and had to rely on personal backups to continue working.
A tracking website identified Vanderbilt as a target of the BYOD group. That organization has hacked 17 targets since September. The same database reports that hackers obtained extensive personal data from Vanderbilt, including student records and more than one million Social Security numbers.
The university asked the community to remain vigilant and take immediate action if they noticed unusual activity on their devices. The announcement emphasized that the Information Technology team was actively investigating the situation and working to contain the breach.
Tech professionals advised users to shut down devices immediately and avoid any aspect of the network until further notice. The widespread nature of the attack prompted these strong recommendations for the university community.
