security —

Michigan State cyber incident claimed by ransomware gang behind recent hospital attack

Michigan State University officials said recent claims by a ransomware gang were tied to an incident last month that forced password resets for all student and employee accounts.

Michigan State cyber incident claimed by ransomware gang behind recent hospital attack

On Sunday evening, the BYOD ransomware gang added the university to its leak site — claiming to have stolen personal information on 1.3 million current and former students. Last week, BYOD caused outrage after attacking The University of New Mexico and shutting down its hospital.

A spokesperson for Michigan State told Recorded Future News that the university “became aware of suspicious cyber activity and immediately began investigating the matter,” in early October. To protect university accounts and systems, the school’s IT team required anyone with an MSU NetID to reset their passwords and create a new password that is at least 15 characters long.

The email was sent out to campus on October 1. “Based on the investigation to date, the activity appeared to be a potential credential compromise event. Current evidence does not indicate a successful compromise of the university's central Active Directory environment,” a spokesperson said.

Earlier coverage

Reported by therecord.media.

security

Related coverage

Elsewhere in this edition