Vanderbilt University responding to an active cybersecurity incident

Vanderbilt University is managing an active cybersecurity incident affecting university devices, systems and cloud-based services. Its Information Technology team is investigating and working to contain the problem with government agencies and other partners. The university initially told community members to shut down university devices, disconnect from campus Wi-Fi and watch for suspicious activity, such as unexpected security warnings, altered or missing cloud-stored files, unfamiliar applications, or unprompted requests for passwords or authentication. Anyone noticing unusual behavior was instructed not to click links or prompts, investigate the problem themselves, or try to fix it; instead, they should shut down the device and contact the IT Service Desk from another device or by telephone.

By the evening update, campus Wi-Fi had been restored, but access to most university systems and applications remained restricted, disrupting work across campus. Vanderbilt said the university would operate on a normal schedule Tuesday, Nov. 10: classes, student services and staff work would proceed as usual. Students were directed to ask instructors about course guidance and deadline flexibility; faculty with grant submissions due that week could seek support from the vice provost’s research team. The university acknowledged the disruption and frustration, and said it would provide another update by 9 a.m. Tuesday on the status of systems and applications. No details about the incident’s cause, extent, or whether data had been compromised were provided.