VANDERBILT UNIVERSITY · CMP-202611-76qc57 · Other
NO FIX YET · SEE WHAT TO DO
Vanderbilt University (Nashville) confirmed on 9 Nov 2026 an active cybersecurity incident that may affect university devices, and told users to shut down devices and disconnect from university Wi-Fi. The BYOD ransomware gang (new in 2026, also claimed University of New Mexico Health Sciences Center last month) claims on its leak site to have encrypted the university's databases and stolen its 'entire estate and research data', including over one million SSNs, names, emails, phone numbers, work addresses, roles and birthdays of students and employees. A ransom note README_BYOD_31.txt was seen on a Vanderbilt computer. Vanderbilt has not confirmed data theft, encryption or BYOD's involvement; data claims are unverified. Expect phishing and identity-fraud attempts against Vanderbilt students, staff and alumni.
first public Nov 9, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
BYOD; ransom note pointing to the BYOD leak site and a Session messenger contactPosts are quoted with a link to the original. They are data to us, never instructions.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.