Vanderbilt Wi-Fi Down After Cyberattack, Devices Told to Shut Off
Vanderbilt University’s Wi-Fi networks and university-issued computers were affected by a cybersecurity incident on Nov. 9, 2026, according to the university and its IT department, VUIT, as reported by The Vanderbilt Hustler. VUIT confirmed a breach to the student newspaper and told the campus community to shut down university devices and disconnect from university Wi-Fi. The incident was still being investigated as of the paper’s last update at 1:16 p.m. CST.
The university said at 1:12 p.m. CST that classes and student support services are proceeding as scheduled. Some professors canceled class on their own, according to students who spoke to the Hustler.
What the university has told the campus
In a statement issued at 11:26 a.m. CST, VUIT said it is “actively investigating and working to contain the situation.” It asked everyone to shut down university devices, disconnect from university Wi-Fi and stay alert for unusual activity. The AlertVU system sent the same message to the community at 11:45 a.m.
Anyone needing immediate help is told to call the IT service desk at 615-343-9999 from a separate device. Earlier, VUIT staff went into classrooms to tell faculty that school-issued computers were not safe to use, students reported. VUIT also urged people to close Microsoft Word documents and OneDrive and Dropbox folders.
At 10:06 a.m., Blair School of Music Dean Melissa Rose said VUIT had suggested students log off the network. Faculty were notified first, and students heard about an hour and 36 minutes later, according to the Hustler.
Claim by a ransomware group
The Hustler reports that a group called BYOD ransomware is believed to be responsible. Ransomware is software that locks an organization’s data and demands payment. The group posted a message on its website claiming to hold more than 1 million Social Security numbers along with names, email addresses, phone numbers, and student and employee records. The Hustler has not confirmed the claim, and Vanderbilt has not said who is responsible or what data was taken.
The group’s site says the breach was discovered at 9:50 a.m. CST. The first campus-wide message came at 11:26 a.m. CST.
Students reported seeing pop-up windows on university-issued devices with wording similar to the group’s website. Criminology professor Laurie Woods told the Hustler that a message appeared on her university computer alongside about 40 documents labeled “Read Me,” and that a verbal message was also played in her class.
Classes and campus services
Junior Audrey Nguyen said her professor wrote “No WiFi, No Class” on the chalkboard and told students that faculty had been advised not to use Brightspace, the university’s course platform, because of a cyber threat. The university said students should ask their course instructor for guidance.
The Student Care Network offices remain open and are holding appointments. Urgent care counseling is available at Counseling and Psychiatric Services.
What this means for students and staff
For now, university-issued laptops are off limits and campus Wi-Fi should not be used, which affects coursework, file access and class platforms such as Brightspace. Instructors are deciding individually how to handle class, and the university has pointed students to them. The university has not said when the network or devices will be safe to use again.
The Hustler is treating the story as developing and says it will update as more information arrives.
Source: The Vanderbilt Hustler