Michigan State University has told its campus community that it is monitoring and investigating a potential cybersecurity threat, while a ransomware group publicly claims to have taken data tied to more than a million current and former students.
The university says it is working with outside partners and government agencies on the matter and has so far found no evidence that personal information was exposed.
A Campuswide Warning From MSU IT
The alert arrived as a campuswide email from MSU IT, the university's central technology office. It notified students, faculty and staff that the school was looking into a possible threat to its systems.
According to university spokesperson Emily Guerrant, the message was meant for general awareness. It urged people to stay especially alert and to follow standard cybersecurity practices while the review continues.
Who Is Involved in the Response
Guerrant told The State News that MSU IT is coordinating with the university's cybersecurity partners, law enforcement and the State of Michigan. The goal, she said, is to protect the institution, its data and the ongoing operation of campus services.
"The investigation is ongoing, and MSU has not determined that any personal information was compromised," Guerrant said.
Ransomware Group BYOD Steps Forward
The ransomware gang known as BYOD has claimed responsibility for a cybersecurity incident at the university, according to reporting by The Record. The group added MSU to its website on Monday.
BYOD asserts that it stole data belonging to 1.3 million current and former MSU students. The same group also says it was behind a cyberattack last week that shut down a University of New Mexico hospital.
Questions About Last Month's Incident
The latest alert follows an earlier security scare. On Oct. 1, MSU emailed faculty, staff and students asking them to reset their NetID passwords after the university detected suspicious activity.
Guerrant said MSU had not been aware that a ransomware group was connected to that October incident. She declined to address whether BYOD actually obtained records on 1.3 million students.
She also said there is no confirmation that the current potential threat is related to last month's activity, leaving open whether the two events are connected.
What It Signals for Universities and Their Communities
Large universities hold sensitive records on students, alumni and employees, making them attractive targets for ransomware operators who use data theft claims as leverage. Public claims by such groups are often unverified at first, and institutions typically take time to confirm what, if anything, was taken.
For the MSU community, the practical advice remains straightforward: stay cautious with suspicious messages, keep credentials secure and watch for official updates as the investigation proceeds. For other institutions, the case is another reminder of how quickly ransomware groups can turn a security incident into a public pressure campaign.
Source: The State News
