Vanderbilt University hit by ransomware, students and staff told to shut down devices

Vanderbilt University announced a cybersecurity incident on Monday morning, warning that campus devices and systems may be impacted. A spokesperson confirmed the IT team is actively investigating and working to contain the situation. The attack is linked to the ransomware gang BYOD, which added Vanderbilt to its leak site and claims to have stolen data. The same group has recently targeted other universities, including Michigan State and the University of New Mexico, where hospital operations were disrupted.

For Vanderbilt's 14,000 students and 6,000+ staff, the immediate directive is to shut down devices, disconnect from university WiFi, and remain vigilant for suspicious activity like pop-ups or password requests. This follows a pattern of escalating ransomware attacks in the education sector, with experts noting a 40% increase in ransomware activity recently. The takeaway is a clear, urgent warning: academic institutions remain prime targets, and robust incident response plans are critical to mitigate operational and safety risks.