Vanderbilt University Data Breach - Federman & Sherwood
Vanderbilt University in Nashville, Tennessee, has disclosed a cybersecurity incident affecting university devices, computer systems, and cloud-based services.
On November 9, 2026, the university instructed students, faculty, and staff to shut down university devices and disconnect from campus Wi-Fi while its information technology team worked to contain the attack.
The ransomware group known as BYOD has reportedly claimed responsibility for the incident, alleging that it obtained sensitive university information, including student and employee records, research data, and more than one million Social Security numbers.
These claims have not been independently verified, and Vanderbilt University has not confirmed whether personal information was stolen or how many individuals may have been affected.
Investigation and next steps
Federman & Sherwood, a national consumer protection law firm, is investigating whether Vanderbilt University implemented reasonable cybersecurity safeguards to protect sensitive personal information and whether additional security measures could have prevented or reduced the impact of the incident.
Current and former Vanderbilt University students, faculty, employees, and other individuals who believe their personal information may have been compromised are encouraged to contact Federman & Sherwood to discuss their potential legal rights.
The potentially compromised information may include names, Social Security numbers, and other sensitive information.
Related
