Science & Tech · Cybersecurity · 4 hrs ago
Vanderbilt warns of cyberattack as ransomware gang claims data theft
Vanderbilt University in Nashville said it is responding to an active cyberattack that may affect university devices, systems and cloud services.
The ransomware group BYOD claims it encrypted university databases and stole data about students, employees and research.
Vanderbilt has not confirmed that BYOD was responsible, that systems were encrypted or that data was stolen.
The university told students and staff to turn off university devices and disconnect from Wi-Fi while its IT team investigates and works to contain the incident.
It also urged people to report suspicious activity to campus IT rather than trying to fix it themselves.
The claims matter because stolen records could expose sensitive personal information, but the university has not verified what data, if any, was taken.
Vanderbilt has not said when systems will be restored or announced further steps beyond its ongoing response.
Vanderbilt University warned that a cyberattack may affect university devices, systems and cloud-based services.
The university told students, faculty and staff to shut down university devices, disconnect from university Wi-Fi and report suspicious activity to IT.
The BYOD ransomware group claimed responsibility and alleged that it encrypted university databases and stole sensitive data.
Vanderbilt has not confirmed BYOD’s involvement, whether systems were encrypted or whether data was stolen.
- Who
- Vanderbilt University and the BYOD ransomware group.
- What
- Vanderbilt reported a cyberattack that may affect its devices, systems and cloud services. BYOD claims it encrypted databases and stole data.
- When
- Monday, November 9, 2026.
- Where
- Vanderbilt University in Nashville, Tennessee.
- Why
- Not stated
Vanderbilt University
BYOD ransomware group
Data theft
Vanderbilt University
Vanderbilt has not confirmed that data was stolen.
BYOD ransomware group
BYOD claims it stole sensitive student, employee and research data.
System encryption
Vanderbilt University
Vanderbilt has not confirmed whether systems were encrypted.
BYOD ransomware group
BYOD claims it encrypted the university’s databases.
Vanderbilt warned that the incident could affect campus devices and systems and told users to shut down devices and disconnect from university Wi-Fi.
BYOD added Vanderbilt to its data leak site and claimed responsibility for the attack.
- University
- Vanderbilt University
- Location
- Nashville, Tennessee
- Ransomware group
- BYOD
- Potentially affected services
- University devices, systems and cloud-based services
- University response
- Shut down devices and disconnect from university Wi-Fi
4 sources
What people are saying
We are currently responding to an active cybersecurity incident that may impact university devices, systems, and cloud-based services. Our Information Technology team is actively investigating and working to contain the situation,
If you could not tell already, your databases are locked, We have your entire estate and research data. Over 1 Million SSNs, Full Names, Email addresses, Phone Numbers, Student & Employee Records, Full takeover of your DC, whatever was on your network, we possess,
We didn’t see their first victim until Sept 29th,
The fragmentation is structural: power is distributed across a wider field of operators, each moving faster and requiring less infrastructure than before,
Posts on X
We are currently responding to an active cybersecurity incident that may impact university devices, systems, and cloud-based services. Our Information Technology team is actively investigating and working to contain the situation.