University Duisburg Essen

University of Duisburg-Essen (UDE) suffered a ransomware attack by the Vice Society ransomware group.

The attack forced the university to reconstruct its IT infrastructure, also the threat actors allegedly stole files from the university, exposed potentially sensitive details about the university’s operations, students, and staff.

The leaked files include backup archives, financial documents, research papers, and student spreadsheets.

The cyberattack affected 1,200 servers and compromised the central authorization system.

Source: https://heimdalsecurity.com/blog/how-vice-societys-ransomware-attack-impacted-university-of-duisburg-essen/

TPRM report: https://scoringcyber.rankiteo.com/company/universit-t-duisburg-essen

"id": "uni195718123",
"linkid": "universit-t-duisburg-essen",
"type": "Ransomware",
"date": "11/2022",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"

{'affected_entities': [{'industry': 'Education',
                        'location': 'Duisburg-Essen, Germany',
                        'name': 'University of Duisburg-Essen',
                        'type': 'Educational Institution'}],
 'data_breach': {'data_exfiltration': True,
                 'file_types_exposed': ['backup archives',
                                        'financial documents',
                                        'research papers',
                                        'student spreadsheets'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['backup archives',
                                              'financial documents',
                                              'research papers',
                                              'student spreadsheets']},
 'description': 'The University of Duisburg-Essen (UDE) suffered a ransomware '
                'attack by the Vice Society ransomware group. The attack '
                'forced the university to reconstruct its IT infrastructure. '
                'The threat actors allegedly stole files from the university, '
                'exposing potentially sensitive details about the university’s '
                'operations, students, and staff. The leaked files include '
                'backup archives, financial documents, research papers, and '
                'student spreadsheets. The cyberattack affected 1,200 servers '
                'and compromised the central authorization system.',
 'impact': {'data_compromised': ['backup archives',
                                 'financial documents',
                                 'research papers',
                                 'student spreadsheets'],
            'operational_impact': 'Reconstruction of IT infrastructure',
            'systems_affected': ['1,200 servers',
                                 'central authorization system']},
 'motivation': 'Financial gain and data theft',
 'ransomware': {'data_exfiltration': True, 'ransomware_strain': 'Vice Society'},
 'response': {'recovery_measures': 'Reconstruction of IT infrastructure'},
 'threat_actor': 'Vice Society ransomware group',
 'title': 'Ransomware Attack on University of Duisburg-Essen',
 'type': 'Ransomware'}