Bottom line: A sophisticated cyber attack compromised UT San Antonio's student registration and tuition payment systems, resulting in a 24-hour downtime of critical systems.
What's happening: The attack, which occurred on April 28, involved a custom-written ransomware tool, CVE-2022-22997, utilizing a CVSS score of 8.5. The attacker gained access to sensitive data, including Social Security numbers and financial information, and demanded a ransom payment of $250,000 in Bitcoin.
What to do: The university's IT department is working closely with the FBI to investigate the incident and ensure the systems are restored. Security leaders should review their incident response plans to ensure they address similar threats in the future.