University of Oklahoma reports cybersecurity incident
Learn More
The University of Oklahoma (OU) is reporting a cybersecurity incident after detecting unusual activity on their IT network. The university, which serves over 34,000 students, has isolated certain systems as part of their incident response.
The incident was publicly exposed when the Fog ransomware group claimed responsibility on their leak site. The timing of the attack coincided with the university's first day of the spring semester, following a period where employees were working remotely due to campus closure from a snow storm. Exposed data allegedly includes:
- Employee data
- Financial information
- Additional unspecified data
- Total claimed data volume: 91 GB
The number of affected individuals is not disclosed.
The attack appears to be part of a larger campaign by the Fog ransomware group. According to Arctic Wolf researchers, the group has primarily targeted U.S. educational institutions, with 80% of their victims being in the education sector. Their typical attack vector involves exploiting compromised VPN credentials across two different VPN gateway vendors.
