Vancouver Film School

Summary

A cyberattack disrupted operations at Vancouver Film School, leading to canceled classes, disabled campus computers, and non-functional Wi-Fi networks, forcing staff and students to rely on personal devices and cellular data for communication. The institution advised against connecting personal devices to its network while investigating the incident, stating no evidence of compromised personal data but acknowledging dependencies on offline systems hindered rescheduling and normal operations. Cybersecurity experts highlighted post-secondary institutions as frequent targets due to under-resourced IT departments, emphasizing the attack's role in exposing systemic underinvestment in protective measures despite ongoing mitigation efforts by specialized teams.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On November 29, 2022, Vancouver Film School (VFS) notified students via email that it was investigating a suspected cyber incident impacting operations across its eight campuses serving approximately 1,000 students. The attack forced immediate cancellations of classes dependent on network resources, with all campus computers shut down indefinitely. Students arriving on campus found Wi-Fi disabled, requiring reliance on personal cellular data for communication. Administrators prohibited personal device connections to the VFS network as a containment measure. Initial communications from Head of Preparatory Studies Tom Fedechko indicated uncertainty regarding resolution timelines, with critical systems including email, Moodle learning platforms, network drives, and scheduling software rendered inoperable. Faculty hastily organized limited Zoom classes for December, though rescheduling remained tentative pending restoration of scheduling tools.

VFS Head of Marketing Evan Biswanger subsequently confirmed engagement of cybersecurity specialists to restore operations, comparing the institutional response to 2020 COVID-19 adaptation efforts. The school asserted no evidence of compromised personal information and characterized class cancellations as limited to those requiring network access. Operational disruptions persisted, however, with Fedechko acknowledging ongoing inability to confirm rescheduled lessons or reactivate core academic software. The incident necessitated manual coordination of alternative instruction methods while IT teams worked on containment and recovery. No restoration timeframe was provided, leaving academic continuity contingent on system recovery progress.

Sources

Sources available to members: 1 source.