Data Breach Affecting More Than One Million People
Hackers have compromised personal information belonging to students and faculty at a major U.S. university.
On Monday, November 10, Vanderbilt University faced a ransomware attack that led to the theft of sensitive data from over one million individuals associated with the institution. The attacker, identifying themselves as BYOD, claimed responsibility for the breach. In response, the university urged all students and staff to disconnect their devices from the campus Wi-Fi and take immediate security precautions.
University’s Response and Impact
Melissa Rose, Dean of the Blair School of Music, addressed the student body shortly after 10 a.m. local time, stating:
“Everyone is following Vanderbilt’s protocols and awaiting further instructions. For now, we ask that all remain completely offline until more information is available.”
Students reported that their desktops were suddenly flooded with copies of a ransom note file and intrusive pop-up messages. While some professors canceled classes, university officials confirmed that lessons continued as scheduled.
University representatives warned against trying to investigate or fix the issue independently, advising: "IMMEDIATELY POWER OFF YOUR DEVICE to avoid additional security risks." One individual reported that files were encrypted and renamed with a '.byod' extension, while another lost access to important research stored on university systems, relying instead on personal backups.
The attacker BYOD posted a ransom demand on the platform Ransomware.live, claiming to have obtained over one million social security numbers, full names, email addresses, phone numbers, and various records of students and staff. The acronym BYOD, meaning 'Bring Your Own Device,' refers to university policies allowing personal devices to access institutional networks. This practice is increasingly exploited by ransomware groups targeting universities and hospitals due to the volume of sensitive data and the high operational costs caused by disruptions.
Meanwhile, a recent data leak affected Japanese company SEGA, where hackers stole more than 2.1 million email addresses following a breach of their ARARA Message mailing service. A total of 2,196,044 addresses receiving SEGA and SEGA FAVE newsletters were compromised, including 92,273 entries containing mailing-related information.
- The compromised newsletters were sent between July 2 and October 28, 2025;
- Topics included the Tokyo Game Show 2026 and arcade games such as CHUNITHM, ONGEKI, and maimai.
These incidents highlight the escalating cybersecurity risks faced by educational institutions, which often handle vast amounts of sensitive data and thus represent attractive targets for cybercriminals. Data breaches not only threaten the privacy of students and faculty but can also lead to significant financial damages. Such attacks are prompting universities to reevaluate and strengthen their security policies to better protect sensitive information and prevent future breaches.
The recent ransomware attack on Vanderbilt University highlights a growing trend in cyber threats, similar to incidents involving other organizations. For instance, Chinese state-sponsored hackers have targeted cloud services, compromising sensitive data across numerous entities. This situation underscores the critical need for enhanced security measures in educational institutions and beyond.