Vanderbilt Orders Urgent PC Shutdown In Crippling Hack Claiming 1M SSNs

by Aaron Leong — Tuesday, November 10, 2026, 10:43 AM EDT

Vanderbilt University campus in Nashville, TN - Image: Vanderbilt University

Vanderbilt University is facing an embarrassing cybersecurity breach and ransomware incident involving stolen data from one million individuals, including social security numbers, names, and email addresses. In turn, school officials have ordered students and staff to shut down their devices and disconnect from campus Wi-Fi hotspots.

We are currently responding to an active cybersecurity incident that may impact university devices, systems, and cloud-based services. Our Information Technology team is actively investigating and working to contain the situation. https://t.co/Tb4Gf10iEa
— Vanderbilt University (@VanderbiltU) November 9, 2026

In response to a detected systems breach, Vanderbilt University’s IT department sent out emergency notifications telling everyone to power down their computers and disconnect from school networks right away. When a university starts screaming to people to "SHUT DOWN YOUR DEVICE IMMEDIATELY," you know things have gone entirely off the rails. Essentially, students and faculty were told to ditch the campus Wi-Fi, kill power to their laptops and university-issued machines, and steer clear of any self-troubleshooting.

Naturally, a campus-wide tech blackout has created quite a bit of chaos. While administrative higher-ups insisted that classes would proceed on a normal schedule, the reality has been anything but. Professors scrambled to figure out whether they were supposed to teach via chalkboard or just cancel class altogether, while students checked their phones (not on the school's Wi-Fi, of course) just to figure out what was going on. One student described the communication from the university during the initial hours as "abysmal and inconsistent," noting that many were left completely in the dark while trying to figure out if their personal data was already floating around the dark web.

BYOD messaging on leak website - Image: VenariX via X

As campus officials worked with cybersecurity partners contain the mess, the ransomware group known as BYOD stepped forward to claim responsibility for the chaos. To make matters worse, the threat actors boasted that they had allegedly walked away with sensitive records of over one million people. While the university has kept tight-lipped and stressed that they are still investigating the full scope of the incident without officially verifying the hackers' claims, the idea of personal info, student files, and staff credentials being compromised is enough to make anyone sweat.

Fortunately, there was a tiny silver lining for the Vanderbilt group, as Vanderbilt Health, which systems are operated separately from the university, confirmed that so far patient care and hospital data remained unaffected by the university network meltdown.