University of California gets fleeced by hackers for $1.14 million
University studying the coronavirus had data stolen then held hostage
The University of California has been hit by a ransomware attack that cost the institution $1.14 million.
A ransomware criminal gang called “Netwalker” hacked the university’s servers and encrypted large amounts of data, some of which university officials told BBC News is “important to some of the academic work we pursue as a university serving the public good.”
Authorities advise against companies paying the ransom as there is no guarantee that the attackers will release the data or destroy their own copies of it. It also serves to fund their criminal enterprises. Regardless, the University of California representatives decided to move forward with the negotiations.
An anonymous tip to BBC News allowed them to follow the negotiations on the dark web, which they published on Tuesday. The criminals’ original asking price was $3 million as they pointed out that the University pulls in “$4-5 billions per year.”
The UC negotiator countered with $780,000 saying that the pandemic has been hard on the university’s finances.
After a long afternoon of negotiations, the two sides settled on a price of $1,140,895 to be delivered in bitcoin. The UC is working with law enforcement officials to investigate the case. On Memorial Day, Michigan State University faced a similar situation but took a hard stand to not pay the ransom.
It’s becoming increasingly difficult for businesses to protect themselves against ransomware attacks. Backing up files offline is highly recommended as well as thorough training of staff on cybersecurity. Most attacks start with a single phishing email being opened.
Sign up today and you will receive a free copy of our Future Focus 2026 report - the leading resource for IT decision-maker insight on priorities and investment areas in AI, security and more.
-
The OpenAI and Anthropic containment breaches are a bit spooky, but also quite sillyOpinion An AI leaving notes to future versions of itself is pure sci-fi; forgetting to lock down an environment is prosaic
-
Bringing data to the heart of AISponsored AI is changing our approach to data, find out how HPE Alletra Storage can help your business
-
Companies are still paying ransoms to cyber criminals despite official adviceNews A Proofpoint survey found evolving ransomware techniques and the use of AI is exacerbating the situation for victims
-
This one cyber crime group accounted for nearly a fifth of all ransomware attacks in JuneNews The Gentlemen, a ransomware a service operator, now accounts for 17% of published attacks
-
Working with the enemy: Ransomware negotiator-turned cyber criminal jailed after working with hackers to extort clientsNews Angelo Martino was supposed to be negotiating on behalf of victims, but was secretly working for ransomware operators
-
Hackers are posing as Interpol to target small businesses – here's what you need to knowNews Small businesses are warned to think twice before clicking on links
-
‘Every hour ransomware goes undetected drastically increases its potential blast radius’: Hackers are breaching networks and laying low for longer – and nearly half of firms don’t realize until data is stolenNews An ExtraHop survey found more intrusions are going undetected, leading to longer dwell times
-
Ransomware cartels are fragmenting into volatile splinter groups, warns Met Police cyber chiefNews Commoditized "cyber crime bazaars" and AI data mining are forcing law enforcement to rewrite its playbook
-
New ransomware threat group, The Gentlemen, has become one of the most active ransomware operators, accounting for 10% of all attacksNews NTT researchers warn that the RaaS group is leveraging SystemBC malware to establish covert tunnelling, evade detection, and support rapid lateral movement across enterprise environments
-
Instructure chose to a pay ransom following the Canvas cyber attack – research shows more than half of security leaders would follow suitAnalysis Opting to pay ransoms creates huge risks for enterprises – you’re relying on the word of criminals