Ransomware · 2 days ago
Vanderbilt University began restoring selected services Tuesday, Nov. 10, as ransomware group BYOD claimed it stole more than one million Social Security numbers, CyberScoop reported. Students and staff could again use campus Wi-Fi, Okta, Outlook, Brightspace, Zoom and university devices; CampusPrint and other systems remained restricted.
BYOD’s figure remains an unverified claim, not a university-confirmed finding. Restoring access to email, identity and learning services does not establish whether personal records were copied or contained.
If the claim is accurate, stolen Social Security numbers can enable identity fraud long after campus systems return. Vanderbilt students and employees would face exposure beyond the outage; other universities hold similar lasting risks wherever they keep large student or employee identity datasets.
5 sources covering this story
Vanderbilt University reels following ransomware attack claimed by BYOD group
Vanderbilt University begins restoring systems after a ransomware attack claimed by the BYOD group reportedly compromised personal data and campus networks.
Ransomware threat blares from Vanderbilt University computers during cyberattack
BYOD claims extensive data theft as campus Wi-Fi returns, most systems remain restricted, and classes carry on
Vanderbilt University Takes Systems Offline After Cyber Incident
The BYOD ransomware group has claimed to have locked the university’s databases and stolen sensitive data from its systems
Vanderbilt University hit in BYOD ransomware attack, data theft claimed
Vanderbilt University warns it is responding to a cyberattack claimed by the BYOD ransomware gang, which claims to have encrypted the university's databases and stolen sensitive student, employee, and research data.
The Record from Recorded Future
Vanderbilt cybersecurity incident impacting campus devices and systems
Vanderbilt University announced a cyberattack, warning students and employees that campus devices and systems may be impacted by the incident.
Part of the PlainSec briefing for 2026-11-11