Vanderbilt University orders device shutdown during cybersecurity incident

Vanderbilt University has instructed its community to shut down all university-issued devices and disconnect from the campus Wi-Fi network. The directive comes as the institution responds to an active cybersecurity incident that may affect university devices, internal systems, and cloud-based services.

The university’s information technology team is currently investigating the breach and working to contain the situation. The alert asks members of the Vanderbilt community to remain vigilant for specific signs of compromise. These indicators include unexpected pop-up windows, unexplained changes to files or cloud storage, the appearance of unfamiliar applications, and unexpected requests for passwords or authentication approvals.

Vanderbilt advised users not to attempt to troubleshoot the issue themselves. Staff and students were told to avoid clicking on links, attachments, or unfamiliar prompts. Instead, individuals who notice unusual activity should power down their devices immediately. This step is intended to help prevent further security risks while the IT team works on a solution.

Those who identify a problem must contact the IT service desk right away. The university specified that this report should be made using a separate device or by telephone. This protocol ensures that the reporting channel remains secure while the primary affected device is offline.

Vanderbilt Health, which operates separately from the main university, confirmed it is aware of the possible incident involving the university's IT systems. A statement from Vanderbilt Health noted that the two entities are legally and financially distinct. The health system reported that its own IT systems have not been impacted so far, though it is continuing to monitor the situation closely. Patient care is proceeding at all hospital and clinical locations.

Vanderbilt Health stated that the safety of its patients remains the top priority. The organization said it is taking necessary precautions to ensure the security of its networks and is proceeding with diligence. The university community is currently following the immediate action plan while the investigation continues.

The IT service desk remains the central point of contact for reports on the incident. Users are directed to use alternative communication methods to avoid potential interference with the investigation or reporting process.