The University of St. Thomas experienced an unauthorized hacking attempt targeting its servers, prompting a shutdown of key systems just days before the fall 2025 semester. The disruption left students unable to access course schedules, financial aid details, and enrollment confirmations, creating uncertainty ahead of classes. While no evidence of compromised university or personal data was found, IT teams quarantined affected servers as a precaution. The outage lasted at least four days, severely impacting operations, including freshman move-in and financial aid verification. Graduate students, like Alma Vazquez, expressed anxiety over unconfirmed aid and enrollment status. The incident reflects a broader trend of rising cyber threats in higher education, particularly post-COVID-19, with ransomware and system breaches becoming more frequent. The university prioritized data security but faced communication challenges, leaving students and staff in limbo as they prepared for the semester start. No ransom demands or data leaks were reported, but the attack disrupted critical services, highlighting vulnerabilities in institutional cybersecurity.
Source: https://www.govtech.com/education/higher-ed/cyber-attack-takes-university-of-st-thomas-texas-offline
TPRM report: https://www.rankiteo.com/company/university-of-st-thomas-department-of-computer-and-information-sciences
"id": "uni538083025",
"linkid": "university-of-st-thomas-department-of-computer-and-information-sciences",
"type": "Cyber Attack",
"date": "6/2025",
"severity": "60",
"impact": "2",
"explanation": "Attack limited on finance or reputation"{'affected_entities': [{'customers_affected': 'students (including graduate '
'and freshman), employees',
'industry': 'higher education',
'location': 'Houston, Texas, USA',
'name': 'University of St. Thomas (Montrose, Houston, '
'Texas)',
'size': '4,350 students (fall 2024 enrollment)',
'type': 'private Catholic university'}],
'date_detected': '2025-08-06',
'date_publicly_disclosed': '2025-08-07',
'description': "A threat to the University of St. Thomas' servers led the "
'school to shut down some of its systems on Tuesday, cutting '
'students off from their course schedules and financial aid '
'information just days before the start of the semester. The '
'disruption occurred after an unauthorized party attempted to '
"hack into the private university's servers. The university "
'has not found any indication that university information was '
'compromised, but IT teams quarantined the affected servers as '
'a precaution. The new semester begins on Monday, and the '
'university is working to restore services while prioritizing '
'the safety and security of all university and personal data.',
'impact': {'brand_reputation_impact': ['potential erosion of trust among '
'students and stakeholders due to '
'system outages and lack of '
'communication'],
'customer_complaints': ['students unable to confirm enrollment or '
'financial aid status'],
'downtime': '4 days (as of report)',
'operational_impact': ['disruption of student access to course '
'schedules',
'disruption of financial aid verification',
'inaccessibility of log-on system',
'difficulty reaching university by phone'],
'systems_affected': ['course schedules',
'financial aid information system',
'log-on system',
'website']},
'investigation_status': 'ongoing (as of 2025-08-07)',
'references': [{'source': 'Houston Chronicle (TNS)'},
{'source': 'Chronicle of Higher Education (context on '
'ransomware trends in higher education)'},
{'source': 'Inside Higher Ed (reference to Columbia University '
'hack in May)'}],
'response': {'communication_strategy': ['email to students and employees from '
'Interim President Dempsey Rosales '
'Acosta',
'public statement via media (Houston '
'Chronicle)'],
'containment_measures': ['quarantining affected servers'],
'incident_response_plan_activated': True,
'recovery_measures': ['investigating the issue',
'actively working to restore services']},
'stakeholder_advisories': ['email from Interim President Dempsey Rosales '
'Acosta to students and employees'],
'threat_actor': 'unauthorized party (unknown)',
'title': 'Unauthorized Access Attempt at University of St. Thomas Disrupts '
'Systems Before Semester Start',
'type': ['unauthorized access attempt', 'potential cyberattack']}