Hackers claim theft of Vanderbilt student data
The gist
Vanderbilt University confirmed an active cybersecurity incident and told users to shut down devices.
The BYOD gang's claim of over 1 million stolen Social Security numbers is unconfirmed.
How it unfolded
- Nov 9, 2026Vanderbilt confirmed it was responding to an active cybersecurity incident and told students, faculty and staff to shut down university devices, disconnect from university Wi-Fi and watch for suspicious activity.
- Nov 9, 2026The BYOD ransomware group claimed responsibility on its data leak site, saying it locked Vanderbilt's databases and holds its entire estate and research data, including over 1 million Social Security numbers and student and employee records.
- Nov 9, 2026Shortly after 10:00 a.m. local time, Blair School of Music Dean Melissa Rose told students everyone was following VU protocols and waiting for further instruction while VUIT worked on it.
Key terms
- BYOD
- Policy allowing people to use their own personal devices for work or school instead of officially provided ones.
- ransomware
- Malware that holds a victim's data hostage, often by encryption, until a ransom is paid.
Source: Wikipedia