Did Your Data Get Stolen in the 2023 Colorado State University Ransomware Attack?

Ransomware attacks are becoming all too common these days, and now Colorado State University has informed staff and students that personal data may have been leaked.

You may not have heard of this Russian-linked cyberattack gang, but they've been doing damage across the world. Their latest attack involves staff and students at CSU. How did it happen, and who was affected?

Has your company been part of a ransomware cyberattack? It can be very frustrating, without question. Staffers and students at CSU, now sit, worried, that their personal information has been compromised.

WHAT EXACTLY WAS THE RANSOMWARE ATTACK AT CSU?

A widespread ransomware attack by the Russian-linked "Clop" gang took advantage of a security flaw they found in a widely-used data transfer tool. The MOVEit tool transfers large data files across the internet. Many universities use MOVEit, including Colorado State.

On July 12, 2023, Colorado State University announced that it had been discovered that CSU had indeed been a part of the attack.

RELATED: THE PALEO DIET BEGAN AT CSU

WHO WAS AFFECTED BY THE RANSOMWARE ATTACK AT CSU?

It's unclear at this writing as to how many current and past staffers and students had their personal information hacked, but CSU said that the data breach dates back to 2021, perhaps even further.

WHAT PERSONAL DATA WAS INVOLVED IN THE RANSOMWARE ATTACK AT CSU?

According to CSU, the date stolen may include:

• First name, middle initial, last name.
• Date of birth.
• Social Security number.
• Student Identification number.
• Gender, race.

Get our free mobile app

WHO IS THIS CYBERATTACK GANG THAT INVOLVED CSU AND RANSOMWARE?

According to BleepingComputer.com, Clop claimed responsibility for this major attack that happened in May 2023, which hit nearly 300 organizations. Though they do demand ransom to have the data files they've stolen deleted or erased, they do seem to have a conscious.

From BleepingComputer.com:

...unprompted, the ransomware gang told BleepingComputer that they had deleted any data stolen from governments, the military, and children's hospitals during these attacks.

Colorado State is conducting an internal investigation to determine whose information was leaked and will inform those persons as the information becomes available.