Vanderbilt University Data Breach
November 11, 2026 – Federman & Sherwood, a national consumer protection law firm, is investigating a cybersecurity incident involving Vanderbilt University in Nashville, Tennessee, following reports of a ransomware attack.
On November 9, 2026, Vanderbilt University disclosed an active cybersecurity incident affecting university devices, computer systems, and cloud-based services. The university instructed students, faculty, and staff to shut down university devices and disconnect from campus Wi-Fi while its information technology team worked to contain the attack.
The ransomware group known as BYOD has reportedly claimed responsibility for the incident, alleging that it obtained sensitive university information, including student and employee records, research data, and more than one million Social Security numbers. These claims have not been independently verified, and Vanderbilt University has not confirmed whether personal information was stolen or how many individuals may have been affected.
Federman & Sherwood is investigating whether Vanderbilt University implemented reasonable cybersecurity safeguards to protect sensitive personal information and whether additional security measures could have prevented or reduced the impact of the incident.
The potentially compromised information may include:
- Names
- Social Security numbers
- Other sensitive information
What is Vanderbilt University?
Vanderbilt University is a private R1 research university in Nashville, Tennessee, that provides higher education, conducts major scientific and academic research, and operates an extensive residential and athletic community.
Current and former Vanderbilt University students, faculty, employees, and other individuals who believe their personal information may have been compromised are encouraged to contact Federman & Sherwood to discuss their potential legal rights.
Phone: 1-800-237-1277 | Email: info@federmanlaw.com