University Of Michigan — Cyber Attacks, Breaches & Threat Activity

Threat entity extracted from intelligence sources

Frequency
7
occurrences
First Seen
December 9, 2025
Last Seen
July 2, 2026

University Of Michigan is a organization tracked across 4 threat clusters and 7 intelligence report mentions on ThreatCluster. First observed December 9, 2025; most recent activity July 2, 2026.

Overview

The University of Michigan is a major public research university in Ann Arbor, Michigan. In cybersecurity discussions, it is cited as a higher-education institution affected by MFA-bypass phishing campaigns, illustrating the risk to university accounts and sensitive research data from credential theft.

Related Threat Clusters

  • Hazy Hawk Campaign Hijacks Subdomains at 34 US Universities

    In early April 2026, a coordinated subdomain takeover campaign was discovered, affecting 34 major US universities, including MIT, Harvard, and Stanford. The attackers, identified as Hazy Hawk, exploited abandoned CNAME…

    2 articles · Updated April 20, 2026
  • Court Dismisses Evidence in Michigan Coach Hacking Case

    Former University of Michigan football coach Matthew Weiss faces serious charges for hacking into the accounts of over 150,000 student-athletes, primarily targeting women. A federal judge ruled to dismiss evidence from…

    8 articles · Updated July 2, 2026
  • Foreign Espionage Concerns Raised at U.S. Universities

    During a House hearing on March 26, 2026, lawmakers expressed alarm over foreign espionage at American universities, particularly focusing on incidents involving Chinese operatives. Witnesses, including Elsa Johnson…

    10 articles · Updated March 26, 2026
  • Evilginx Phishing Operation Targets 18 U.S. Universities, Bypasses MFA

    A coordinated phishing campaign using the Evilginx toolkit has targeted at least 18 American universities, exploiting advanced session-hijacking techniques to bypass multi-factor authentication (MFA) and gain…

    2 articles · Updated December 11, 2025

Recent Intelligence Reports

  • Ex-Michigan coach hacking case: Judge rules to dismiss some evidence — Fox2Detroit · July 2, 2026
  • Hazy Hawk Hijacked Subdomains Mit Harvard Stanford Us Universities — www.sh.consulting · April 20, 2026
  • Threat actor hijacked subdomains at 30+ major universities, researcher found — Edscoop · April 20, 2026
  • Lawmakers warn of foreign espionage on U.S. campuses — Ksla · March 26, 2026
  • Lawmakers warn of foreign espionage on U.S. campuses — Wsmv · March 26, 2026
  • Infoblox Uncovers MFA-Bypassing “Evilginx” Phishing Operation Targeting U.S. Universities — Securityinfowatch · December 11, 2025
  • Phishing attack targets 18 US universities, bypassing MFA — Scworld · December 9, 2025

CVSS v3.1 Breakdown