Cyber Incident Victim: DePauw University
Date:
Oct 2023
Location:
United States of America
Summary
DePauw University experienced a cybersecurity incident that disrupted its network environment, leading to widespread operational impacts including internet outages, inaccessibility of online learning platforms, campus printers, email services, and local network resources while classes remained in session. The institution engaged forensic experts to restore systems and investigate the incident, acknowledging the complexity of such investigations and committing to protecting sensitive data, though it remained unclear whether personal information was compromised. This event occurred amid a reported rise in ransomware attacks nationally.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 0 motives | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On October 31, 2023, DePauw University experienced a cybersecurity incident that disrupted its computer systems starting around 9:00 AM. The incident forced the shutdown of internet access, email services, the Moodle online learning platform, campus printers, and the university’s local network. Despite these outages, in-person classes remained in session, though students and faculty faced significant operational challenges due to the loss of critical digital resources. A parent of a student reported these disruptions to WISH-TV, highlighting the immediate impact on academic and administrative functions. The university confirmed the incident publicly, stating it had engaged forensic experts to investigate and restore affected systems. Initial assessments indicated the event was part of a broader national trend of increasing cyberattacks targeting educational institutions and other organizations.
DePauw University’s response included initiating a comprehensive investigation expected to span several weeks, with no immediate confirmation of whether student or employee data was compromised. The institution emphasized its commitment to safeguarding personal information and system security while apologizing for the inconvenience caused. Restoration efforts focused on rebuilding the network environment with external forensic support, though no specific timeline for full recovery was provided. The incident occurred amid a reported 65% rise in publicly disclosed ransomware attacks nationwide in 2023, contextualizing the event within wider cybersecurity challenges. Enrollment data indicated 1,752 students and 228 faculty were potentially affected by the disruptions, though academic continuity was maintained through alternative means during the outage.