Australian National University investigating claims of ransomware attack

The Australian National University (ANU) is investigating claims of a ransomware attack after being listed on fsociety ransomware group's dark web leak site on February 16, 2025. The university serves approximately 18,934 students (as of 2022) and employs over 4,000 staff members who could potentially be affected by this incident.

The threat actors claim to have compromised servers at anu.edu.au and extracted data prior to encryption. The group has issued a seven-day ultimatum to the university, threatening to leak student and teacher data if their demands are not met. No specific ransom amount has been disclosed, and the volume of potentially compromised data remains unknown.

The university, based in Canberra, has confirmed they are working in collaboration with the Australian Cyber Security Centre to address these claims, though they have not provided further details about the scope of the potential breach.