University of Texas at San Antonio takes systems offline after cyberattack

Cyberattack Disrupts University Operations

The University of Texas at San Antonio (UTSA), serving 40,000 students, experienced a cyberattack that led to several systems being taken offline. The IT team identified threat activity on the academic campus over the weekend, prompting the shutdown of services including phones.

Impact on Students and Services

The timing of the attack, just before classes were scheduled to begin on Wednesday, caused disruptions to critical student services. These include systems used for course registration and payment submissions. The university extended the deadline for student payments to Friday and made changes to course waitlists.

Containment and Data Security

Michael Schnabel, UTSA's chief technology officer, stated that the threat activity was detected at the edge of the university's network and was contained before it could reach core systems. As of the statement, the ongoing investigation has found no evidence that university data was accessed or exfiltrated. The university did not provide details on what specific systems were impacted beyond phones.

Password Reset Delays

Initially, UTSA planned for all students and teachers to reset their passwords. However, a subsequent update indicated that the password reset effort was experiencing delays. No specific hacking group has claimed responsibility for the attack.

Broader Context of University Cyberattacks

Universities are frequently targeted by cybercriminals, particularly at the beginning and end of academic years, often for ransomware. Previous incidents include attacks on universities across the U.S. in May that delayed final exams, and ransomware attacks on institutions like the University of Oklahoma, Stanford, and the University of Michigan following holiday breaks. The University of Pennsylvania, Columbia, and Harvard Universities have also faced cybersecurity incidents.