Ransomware Gang Emails College Students with Demands
The ransomware gang responsible for Knox College’s data breach is now directly contacting, intimidating students.
stock.adobe.com/vchalup
Here’s a new twist to ransomware: a hacker group that gained access to Knox College’s student data is emailing students directly with their ransom demands.
The group, known as the Hive, is believed to be responsible for the attack on the small liberal arts college’s computer network, reports NBC News. The hackers sent an email out to students on the evening of December 12.
The message claims the hackers have student personal data, including their Social Security numbers, medical records, psychological assessments, and other sensitive information. The group said it would put the stolen information for sale online.
“To us, this is a normal business day,” the email said in broken English, which is common for internationally-based ransomware gangs. “For you, its a sad day where everyone will see your personal and private info,” reports NBC News.
What happened at Knox College appears to be the first known case where ransomware hackers contact students directly to intimidate them.
According to a cybersecurity expert interviewed by NBC News, hackers are resorting to this tactic because more and more victims are refusing to pay ransoms.
The school originally announced it had experienced a ransomware attack on December 2, reports WGIL.
“We took prompt action to secure our network environment,” said the school’s Vice President of Communications and ITS Lisa Van Riper in a statement. “Systems and operations have been shut down to protect data and information, and we have engaged leading independent cybersecurity and digital forensics experts to assist with our investigation and response. We are working actively and diligently with the assistance of our retained experts to fully restore operations.”
It’s unclear if Knox College is trying to negotiate with the Hive. Authorities strongly recommend victims not pay ransoms because paying doesn’t guarantee that you’ll get data back and it encourages more ransomware activities.
However, there is the risk that data will be released. That’s what happened this fall when the Los Angeles Unified School District didn’t pay the ransom demanded by Vice Society, another ransomware gang.
Back in the fall of 2020, the Social Security numbers, grades, addresses, retirement documents and other personal information of Clark County School District (CCSD) students and employees were released to the public by hackers after district officials wouldn’t pay the ransom cyber criminals were seeking.
If you appreciated this article and want to receive more valuable industry content like this, click here to sign up for our FREE digital newsletters!
About the Author
Robin Hattersley, Editor-in-Chief
Robin has been covering the security and campus law enforcement industries since 1998 and is a specialist in school, university and hospital security, public safety and emergency management, as well as emerging technologies and systems integration. She joined CS in 2005 and has authored award-winning editorial on campus law enforcement and security funding, officer recruitment and retention, access control, IP video, network integration, event management, crime trends, the Clery Act, Title IX compliance, sexual assault, dating abuse, emergency communications, incident management software and more. Robin has been featured on national and local media outlets and was formerly associate editor for the trade publication Security Sales & Integration. She obtained her undergraduate degree in history from California State University, Long Beach.
Related Content
Leading in Turbulent Times: Effective Campus Public Safety Leadership for the 21st Century
This new webcast will discuss how campus public safety leaders can effectively incorporate Clery Act, Title IX, customer service, “helicopter” parents, emergency notification, town-gown relationships, brand management, Greek Life, student recruitment, faculty, and more into their roles and develop the necessary skills to successfully lead their departments. Register today to attend this free webcast!
