Vanderbilt University is currently managing a significant cybersecurity incident after the BYOD ransomware gang claimed responsibility for infiltrating its network, with further coverage provided by Bleeping Computer.
The university confirmed the breach on Monday, alerting students, faculty, and staff that devices, systems, and cloud-based services may be compromised. Officials instructed users to disconnect from university Wi-Fi and power down devices if they observe suspicious activity, such as unexpected pop-ups or missing files. While the university has not publicly confirmed the extent of data theft, the BYOD ransomware group alleges it has encrypted databases and stolen sensitive information, including over 1 million Social Security numbers, names, and employee records.
The attackers provided evidence of the intrusion through a ransom note and audio warnings on infected systems. This incident follows a similar attack by the same group on the University of New Mexico Health Sciences Center last month. BYOD, a group that emerged in 2026, continues to target academic and healthcare institutions, raising concerns about the security of sensitive research and personal data within the education sector. Vanderbilt continues to work with its information technology team to contain the threat and investigate the full scope of the unauthorized access.
Source: Bleeping Computer
