" BYOD RANSOMWARE GANG CLAIMS VANDERBILT UNIVERSITY BREACH The ...

X • November 9, 2026

The BYOD ransomware gang has listed Vanderbilt University (vanderbilt[.]edu) on its leak site, saying its databases are locked.

The group claims it holds "your entire estate and research data," including over 1 million Social Security numbers, full names, emails, phone numbers, student and employee records, and a full takeover of the university's domain controller.

Vanderbilt has not confirmed an incident. No samples have been independently verified.

These claims come only from the group's own listing. BYOD is a new gang, active since September, that has recently targeted US universities and a university hospital. If real, students and staff face SSN-based identity fraud and targeted phishing. Treat this as an unverified threat-actor claim, NOT confirmation of a breach.

naming your ransomware crew byod is cruel

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

BYOD Ransomware Group Targets Vanderbilt University, Claims Data Theft On November 9, 2026, Vanderbilt University experienced a cybersecurity incident attributed to the BYOD ransomware group, which claimed to have stolen sensitive data, including over one million Social Security numbers, student and employee records, and research data. The university instructed its community to shut down devices and disconnect from campus Wi-Fi as its IT team worked to contain the situation. BYOD's claims were posted on a ransomware leak site, asserting they had encrypted the university's databases. While the university has confirmed the incident, it has not verified the extent of the data breach or whether any information was actually compromised. The attack has disrupted classes and university operations, with reports of pop-up warnings and unusual activity on university devices. This incident follows a similar attack on Michigan State University by the same group, raising concerns about the targeting of educational institutions. 31 sources 61

Extracted Entities

" BYOD RANSOMWARE GANG CLAIMS VANDERBILT UNIVERSITY BREACH The ...

The full story

Extracted Entities

Attack Types (1)

Companies (1)

Domains (1)

MITRE ATT&CK (1)

Ransomware Groups (1)