BYOD Ransomware Group Targets Vanderbilt University, Claims Data Theft

• •Vanderbilt University is responding to a ransomware attack claimed by the BYOD group.
• •The group alleges it has stolen sensitive data, including over one million Social Security numbers.
• •University operations were disrupted, prompting a shutdown of devices and Wi-Fi access.

On November 9, 2026, Vanderbilt University experienced a cybersecurity incident attributed to the BYOD ransomware group, which claimed to have stolen sensitive data, including over one million Social Security numbers, student and employee records, and research data. The university instructed its community to shut down devices and disconnect from campus Wi-Fi as its IT team worked to contain the situation. BYOD's claims were posted on a ransomware leak site, asserting they had encrypted the university's databases. While the university has confirmed the incident, it has not verified the extent of the data breach or whether any information was actually compromised. The attack has disrupted classes and university operations, with reports of pop-up warnings and unusual activity on university devices. This incident follows a similar attack on Michigan State University by the same group, raising concerns about the targeting of educational institutions.