University of Texas at Arlington warns personal information stolen during cyberattack
University of Texas at Arlington confirms personal information stolen in cyberattack claimed by Qilin ransomware.
The University of Texas at Arlington has confirmed that personal information was stolen during a cybersecurity incident last month. An investigation is ongoing to determine the specific data compromised and affected individuals. The Qilin ransomware gang has claimed responsibility for the attack, which also led to the temporary offline status of the MachForms online portal.
AI summary of the linked source. Not reviewed by an editor. How this works
The lesson from this incident
Full lessonThe University of Texas at Arlington suffered a ransomware attack by the Qilin gang, resulting in the confirmed theft of personal information belonging to students, staff, or both. Ransomware groups like Qilin typically combine data exfiltration with encryption to maximize leverage — stolen data can be published or sold even if the victim recovers from the encryption. The temporary takedown of the MachForms portal suggests the attack reached internet-facing systems, which often serve as initial access points. Universities are high-value targets because they hold large volumes of sensitive personal, financial, and research data while frequently operating with constrained security budgets. This incident underscores the need for robust data minimization, rapid detection, and a tested incident response plan in higher education environments.
What helps against this
How we list vendors- Identity threat detection and response (ITDR)
Attackers who log in with real, stolen credentials get noticed.
- Immutable backup and recovery
Ransomware cannot delete or encrypt your way back.
- Incident response retainer
Experts are on call before the worst day, not searched for during it.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- malware — Qilin