Bristol Community College

Summary

Bristol Community College experienced a criminal cyberattack involving ransomware encryption that disrupted its network infrastructure, causing widespread outages of on-site internet, email, collaboration tools, shared document systems, and critical information platforms. While the investigation found no initial evidence of unauthorized access to personal or educational records, restoration efforts were ongoing and expected to require significant time. Despite operational challenges, winter classes proceeded as scheduled with adapted solutions, facilitated by faculty and staff coordination under continued ITS remediation work.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

Bristol Community College experienced unauthorized network access on or around December 23, 2022, later confirmed as a criminal cyberattack involving ransomware encryption. The college initiated an immediate investigation with external cybersecurity professionals to assess the compromise's scope. This incident disrupted critical network infrastructure, rendering on-site internet, Wi-Fi, email, Microsoft Teams, shared document repositories, and administrative systems like accessBCC, Banner, and Argos inaccessible across all campuses. Phone systems remained operational despite the widespread network outage. The attack forced the institution to prioritize mission-critical operations, particularly ensuring the Winter academic session commenced as scheduled on December 30, 2022. Faculty and staff implemented alternative methods to deliver instruction and services, leveraging workarounds for Blackboard access after password resets. Information Technology Services (ITS) teams worked continuously to restore systems while conducting a comprehensive audit to identify affected infrastructure and establish recovery timelines.

The investigation initially found no forensic evidence confirming unauthorized access to or acquisition of personal information as defined by state data breach laws or FERPA-protected educational records, though this remained a primary investigative focus. Bristol established a dedicated webpage for incident updates and advised community members to proactively monitor financial accounts, change passwords, and review IdentityTheft.gov resources. Temporary support channels included a Gmail address ([email protected]) and voicemail (774.357.2081) for technology assistance during email outages. Supervisors relayed department-specific instructions through alternative communication methods while network restoration efforts continued. The college cited broader cybersecurity trends, noting education institutions faced 1,065 weekly attacks in 2021—a 75% annual increase—to contextualize the incident’s occurrence. Operational impacts persisted with no definitive resolution timeline, though academic activities proceeded through adapted workflows and external service dependencies.

Sources

Sources available to members: 1 source.