Vanderbilt University is responding to a cyberattack. A ransomware gang says it locked the school's databases and stole data, including over 1 million Social Security numbers.
Vanderbilt University says it is dealing with an active cyberattack. A ransomware gang called BYOD says it locked the school's databases and stole sensitive data on students and employees. The gang claims it holds more than 1 million Social Security numbers. Vanderbilt has not confirmed that any data was stolen.
The university confirmed the incident Monday. In a statement on X, it said the attack may affect university devices, systems and cloud-based services. Its IT team is investigating and working to contain it. Students, faculty and staff were told to shut down university devices, disconnect from university Wi-Fi and watch for suspicious activity.
Ransomware is a type of attack where criminals lock a victim's files and demand payment, often while threatening to publish stolen data. BYOD posted a message on its data leak site saying it has the school's "entire estate and research data." It lists Social Security numbers, full names, email addresses, phone numbers, and student and employee records.
BleepingComputer received a photo of an alleged computer screen showing a BYOD ransom note. The note's link leads to the site BYOD runs, which the outlet confirmed. A video also shows infected devices playing audio saying the network was compromised by BYOD. The note threatens to release stolen data and cause more disruption if the university does not negotiate.
Vanderbilt has not publicly described the nature of the attack. It has not confirmed that BYOD is behind it, that data was stolen, or that devices were encrypted. BleepingComputer asked the university whether the incident has been contained. The outlet had not reported an answer.
Anyone tied to Vanderbilt should watch their accounts and credit for odd activity, since the gang claims Social Security numbers were taken. Students and staff should follow the university's guidance. It listed these signs of a problem:
If you notice any of these, do not try to investigate or fix it yourself. Shut down the device right away and contact the university's IT service desk.
BYOD is a relatively new group that launched in 2026. Its leak site lists 5 other organizations. Last month it claimed an attack on the University of New Mexico Health Sciences Center, which caused system outages and disrupted patient care and academic activities.
If you have ties to Vanderbilt, watch your accounts and credit for odd activity, and follow the university's IT instructions.
Mastercard says AI payments, cybersecurity and digital assets are its new growth areas, which could change how you pay and how safe it feels.
Read more: Mastercard sees growth in AI payments and cybersecurityAWS Glue now has 100 ready-made connectors for business apps, so combining sales, payroll and marketing data may take less custom work.
Read more: Amazon's data tool can now pull from 100 more business apps without custom codeDeputies in the Upstate area say scammers are calling while posing as police officers, and a scary call can cost you money or personal details.
Read more: Sheriff's deputies warn of scam calls from fake police officers
