A ransomware attack on February 2 crippled the University of The Bahamas, disrupting all online systems including email, classwork platforms, and administrative applications across its three campuses serving 5,000 students. Online classes were canceled, deadlines extended, and credit card payments halted (only cash accepted). Telephone systems remained offline for days, forcing reliance on temporary mobile numbers. The attack may have compromised personal information, prompting password resets for students. While in-person classes continued, the university implemented a phased network restoration with enhanced security. The incident follows a broader trend of ransomware targeting Caribbean institutions, with nearby Turks and Caicos hit just weeks prior. No gang claimed responsibility, and the university did not disclose ransom demands. Recovery efforts involved law enforcement and cybersecurity experts, but operational disruptions persisted for nearly a week, affecting students, faculty, and administrative functions.
Source: https://therecord.media/bahamas-university-ransomware-attack
TPRM report: https://www.rankiteo.com/company/college-of-the-bahamas
"id": "col5102051092325",
"linkid": "college-of-the-bahamas",
"type": "Ransomware",
"date": "2/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'customers_affected': '5,000 students, 700+ faculty '
'and staff',
'industry': 'higher education',
'location': 'The Bahamas (three campuses)',
'name': 'University of The Bahamas',
'size': '5,000 students, 700+ faculty and staff',
'type': 'educational institution'}],
'customer_advisories': ['password reset recommendation',
'use of temporary mobile numbers for contact',
'cash-only transactions at kiosks'],
'data_breach': {'personally_identifiable_information': 'potentially '
'compromised',
'sensitivity_of_data': 'high (personal information)',
'type_of_data_compromised': ['personal information '
'(potential)']},
'date_detected': '2024-02-02',
'date_publicly_disclosed': '2024-02-03',
'description': 'A ransomware gang targeted the University of The Bahamas, '
'shutting down its internet and telephone systems. The attack, '
'which began on February 2, disrupted all online applications, '
'including email platforms and systems used for classwork, '
'forcing the cancellation of online classes. The university is '
'working with law enforcement to contain the incident and has '
'warned that personal information may have been compromised. '
'In-person classes continue, but deadlines have been extended, '
'and only cash is accepted at kiosks due to downed credit card '
'systems. The university is implementing a phased network '
'restoration with enhanced security protocols.',
'impact': {'brand_reputation_impact': 'potential damage due to disruption of '
'services and data breach risk',
'data_compromised': ['personal information (potentially)'],
'downtime': ['online classes (cancelled since 2024-02-02)',
'telephone systems (offline as of 2024-02-08 evening)',
'credit card machines (down, cash-only transactions)',
'website (restored on 2024-02-09)'],
'identity_theft_risk': 'potential (personal information may have '
'been impacted)',
'operational_impact': ['cancellation of all online classes',
'extension of application deadlines',
'adjustments for assignment deadlines',
'reliance on temporary mobile numbers for '
'contact',
'cash-only transactions at kiosks'],
'systems_affected': ['internet systems',
'telephone systems',
'email platforms',
'online classwork systems',
'credit card machines',
'website (temporarily)']},
'investigation_status': 'ongoing (as of 2024-02-09)',
'post_incident_analysis': {'corrective_actions': ['enhanced security '
'protocols',
'phased network '
'restoration']},
'ransomware': {'data_encryption': True},
'references': [{'source': 'News report on University of The Bahamas '
'ransomware attack'},
{'source': 'University of The Bahamas public statements '
'(2024-02-03 and 2024-02-08)'}],
'response': {'communication_strategy': ['public statements on 2024-02-03 and '
'2024-02-08',
'advisory for students to change '
'passwords',
'provision of temporary contact '
'numbers'],
'containment_measures': ['collaboration with law enforcement',
'phased network restoration'],
'enhanced_monitoring': True,
'incident_response_plan_activated': True,
'law_enforcement_notified': True,
'recovery_measures': ['phased approach to network restoration',
'temporary mobile numbers for contact',
'website restoration (completed by '
'2024-02-09)'],
'remediation_measures': ['enhanced security protocols',
'password reset advisory for students'],
'third_party_assistance': ['industry experts']},
'stakeholder_advisories': ['password change advisory for students',
'temporary mobile numbers for contact',
'deadline extensions for applications and '
'assignments'],
'title': 'Ransomware Attack on University of The Bahamas Disrupts Online '
'Systems and Classes',
'type': 'ransomware'}