University of Central Missouri

Summary

The University of Central Missouri experienced an attempted cyberattack on its servers, prompting an immediate response to contain the incident. All IT systems were proactively shut down and remained offline, initially projected for six hours but with advisories for students and staff to prepare for up to 48 hours of disruption. UCM collaborated with external partners, including state authorities, while maintaining that academic and operational routines should continue unaffected. No details regarding potential data compromise were disclosed. Critical services such as facilities coordination and emergency communications remained accessible through designated phone lines during the outage.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On February 7, 2024, the University of Central Missouri (UCM) detected an attempted cyberattack targeting its servers, prompting an immediate shutdown of all information technology systems. University officials announced the incident publicly that same day, confirming they had initiated containment protocols upon discovering the breach attempt. IT personnel worked with external partners, including the State of Missouri, to resolve the situation while maintaining isolation of affected systems. As a precautionary measure, UCM disabled its entire IT infrastructure for an initial six-hour period but cautioned the campus community that system restoration might require up to 48 hours. The university emphasized the attack had been contained but did not disclose technical specifics about the intrusion method or whether any data was exfiltrated. No threat actor identity or motive was revealed in the public statement.

The systemic IT outage disrupted academic and administrative operations across UCM's Warrensburg campus, though university leadership instructed students and employees to continue regular academic and work activities despite lacking digital system access. Critical infrastructure exceptions included Public Safety Dispatch, which remained operational for emergency communications via 660-543-4123, while facility-related requests were redirected to Facilities, Planning and Operations at 660-543-4331. The university provided no timeline for full service restoration beyond the 48-hour advisory and did not specify which departmental systems or data repositories were most impacted. No evidence suggested physical safety compromises or research data breaches, though the comprehensive network shutdown indicated broad precautionary measures affecting both academic and administrative functions equally. UCM maintained operational continuity for essential safety services while forensic investigation and system remediation continued.

Sources

Sources available to members: 1 source.