Vanderbilt University Announces Cyberattack, BYOD Group Implicated
Vanderbilt University reported a cyberattack on November 9, 2026, with the BYOD group suspected. Sensitive data may have been stolen, and efforts to contain the situation are ongoing.
OffSet7 Newsroom · Reviewed by an OffSet7 analyst · AI-assisted
What happened
Cyberattack on Vanderbilt University.
Who is affected
Campus devices and systems at Vanderbilt University.
Exploited
BYOD claimed to have stolen sensitive data.
What to do
Community urged to shut down devices and disconnect from Wi-Fi.
Vanderbilt University announced on November 9, 2026, that it had experienced a cyberattack. The incident was discovered at approximately 9:50 a.m. CST. The university warned that campus devices and systems might be impacted.
The ransomware group BYOD is suspected to be responsible for the attack. The group claimed to have stolen sensitive data, including Social Security numbers and personal information.
Vanderbilt's IT team is actively investigating the situation and working to contain the breach. The university has urged its community to shut down university devices and disconnect from the university Wi-Fi.
Students reported seeing pop-up messages on university-issued devices related to the cyberattack. The university's IT help line reportedly crashed due to the incident.
Vanderbilt Health confirmed that its hospital and clinical facilities were not impacted by the cyberattack. The university serves about 14,000 students and employs more than 6,000 staff members.
