Cyber Incident Victim: Institute of Distance and Open Learning (IDOL)
Date:
Oct 2020
Location:
India
Summary
A cyber attack targeting the examination server of the Institute of Distance and Open Learning disrupted operations, causing technical failures that forced the postponement of exams for two consecutive days. The incident impacted approximately 9,000 enrolled students, with over 90% unable to access assessment links for third-year Bachelor of Commerce and Arts courses during the scheduled period. The institute attributed the delays directly to the server compromise.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On October 6, 2020, the Institute of Distance and Open Learning (IDOL), a distance education division of the University of Mumbai, experienced a cyberattack targeting its examination server. This incident caused significant technical disruptions during scheduled third-year Bachelor of Commerce and Bachelor of Arts examinations for approximately 9,000 enrolled students. The attack occurred on Tuesday, October 6, preventing over 90% of affected students from accessing critical exam links required to complete their assessments. IDOL authorities publicly confirmed the cyberattack as the direct cause of the technical failure, marking the second consecutive day of examination postponements due to unresolved system issues. No details regarding the attack vector, perpetrator identity, or specific server vulnerabilities were disclosed in the official statement.
The cyberattack’s immediate consequence was the indefinite postponement of all impacted examinations, creating academic uncertainty for IDOL’s student body. University administrators did not specify remediation timelines or detail containment measures beyond acknowledging the server compromise. The incident disrupted academic operations for a substantial majority of the 9,000 registered students, though no evidence suggested unauthorized access to student data or secondary systems beyond the examination platform. IDOL’s public communication focused solely on attributing the exam delays to the cyber incident without elaborating on forensic investigations, recovery protocols, or future safeguards. The disruption highlighted operational dependencies on digital infrastructure for critical academic functions within the institution.