Back ctiwatch.com

Vanderbilt Edu A0449e3e

ctiwatch.com • November 10, 2026

Vanderbilt EDU was listed on the byod ransomware leak site in November 2026. The organization operates in the Education sector in United States. The listing date is not necessarily the date of the attack.

byod operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

[PSA] If you could not tell already, your databases are locked, We have your entire estate and research data. Over 1 Million SSNs, Full Names, Email addresses, Phone Numbers, Student & Employee Records, Full takeover of your DC, whatever was on your network, we possess. Anyways, you know where to find us ( tab). We will take you down when communication has been established between our team and yours.

Other Victims — byod (8)

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

BYOD Ransomware Group Targets Vanderbilt University, Claims Data Theft On November 9, 2026, Vanderbilt University experienced a cybersecurity incident attributed to the BYOD ransomware group, which claimed to have stolen sensitive data, including over one million Social Security numbers, student and employee records, and research data. The university instructed its community to shut down devices and disconnect from campus Wi-Fi as its IT team worked to contain the situation. BYOD's claims were posted on a ransomware leak site, asserting they had encrypted the university's databases. While the university has confirmed the incident, it has not verified the extent of the data breach or whether any information was actually compromised. The attack has disrupted classes and university operations, with reports of pop-up warnings and unusual activity on university devices. This incident follows a similar attack on Michigan State University by the same group, raising concerns about the targeting of educational institutions. 31 sources 61

Extracted Entities

Vanderbilt Edu A0449e3e

The full story

Extracted Entities

Attack Types (1)

Companies (2)

Countries (1)

CWE Weaknesses (1)

MITRE ATT&CK (1)

Ransomware Groups (1)