Whitworth University

Whitworth University is a higher education institution located in the United States of America. In late July 2022, the university experienced a significant ransomware attack attributed to the LockBit cybercriminal group. This incident directly disrupted the university's information systems, leading to operational outages that affected phone lines and website access. The attack was discovered on or around July 29, 2022, initiating an ongoing investigation to determine the full scope of the incident. A primary focus of this investigation is whether personal data belonging to students, alumni, employees, or donors was accessed or exfiltrated by the attackers. The university has committed to notifying affected individuals if a determination of data compromise is ultimately made.

Recovery and remediation efforts following the attack involved collaboration with external cybersecurity experts to restore affected systems and implement enhanced security measures. The university's public statements emphasized a priority on securing its digital environment and minimizing risks to stakeholders, while declining to confirm specific details regarding any ransom demand or the precise nature of any data exposure. The tactics employed by the LockBit group, which typically involve both data encryption and theft for extortion, align with the observed disruption. Washington state breach notification laws may become applicable depending on the investigation's findings concerning personal information. The institution aimed to resume near-normal operations within weeks of the attack's discovery, though the full long-term implications for its digital infrastructure and data governance remain tied to the conclusions of the ongoing forensic review.