Vanderbilt Restores Wi-Fi, Keeps Online Systems Restricted After Cyberattack

Vanderbilt University restored Wi-Fi access for its campus on Monday evening, but it continues to restrict entry to most online systems following a cybersecurity incident. The university confirmed the connectivity return while noting that the investigation remains active.

The breach appeared Monday morning when students and staff found a threatening message on their devices. The alert read, “You have been compromised by BYOD,” and instructed users to follow directions placed on their desktops. It warned that failure to communicate would result in the estate being “brought to the ground completely.”

BYOD is the group allegedly behind the intrusion. Vanderbilt stated it is collaborating with government agencies as the investigation proceeds. The university’s IT team is working to contain the issue and manage the restricted access to its digital platforms.

Luke Wells, a Vanderbilt senior, described the disruption as challenging for students who rely on digital tools for their coursework. He noted that the university asked users to shut down devices and avoid specific websites while also expecting them to complete daily tasks on laptops. “The vast majority of us are using our laptops every day in class. How do you expect us to do that if you are also telling us to shut down your devices, don’t use any of these websites. You can’t do both,” Wells said.

Wells characterized the message as resembling a classic scam, suggesting the perpetrators are acting as though they hold more power than they actually possess. He acknowledged that the group still had access and could potentially cause damage. Wells texted a friend at Michigan State University, who reported a similar incident occurred there approximately one month ago.

The university sent a message to its community on Monday morning urging users to monitor their devices for unusual behavior. It listed specific signs to watch for, including unexpected pop-up messages and alterations to files or folders within the university’s system. Vanderbilt previously advised students, faculty, and staff to disconnect from the school’s Wi-Fi and power down university devices while IT teams assessed the situation.

Vanderbilt’s health system was not affected by the incident because it operates on separate IT systems. The health system is implementing precautionary measures despite the lack of direct impact. The university will maintain a normal schedule on Tuesday. Another update is expected on Tuesday morning.

The cybersecurity incident has left a significant portion of the university’s digital infrastructure offline for users. Students reported that the majority of their assignments require online access, creating a workflow disruption during the investigation period.