Lewis & Clark

Lewis & Clark operates as an educational institution providing higher education services. It offers undergraduate and graduate degree programs as well as community college coursework. The institution serves students and community members across its multiple campuses. Incident reports indicate that the college has more than one campus, as a ransomware event led to the shutdown of all campuses. Its headquarters is located in the United States of America.

The college has been the target of ransomware attacks, with notable incidents occurring on March 3, 2023 and November 23, 2021. In the 2023 attack, attackers gained unauthorized access to LC Files, stealing personal data such as passport details and social security numbers. The stolen data was partially published on the dark web, prompting the institution to engage external forensic experts. Lewis & Clark restored affected systems from backups and did not pay the ransom, while core platforms like Workday, Colleague, and Nelnet remained uncompromised. Following the breach, the college offered credit monitoring and identity restoration services to current and former community members. The 2021 ransomware incident led to a temporary shutdown of all campuses and cancellation of extracurricular activities after suspicious network activity was detected. In response to these events, the institution has implemented enhanced security measures, including multi‑factor authentication for VPN access. These experiences highlight the college’s role within the education sector and its need to manage cybersecurity risks.