Michigan State addresses credential incident as ransomware gang claims theft

Michigan State University has linked recent ransomware-gang claims to suspicious cyber activity it investigated in October. The university required password resets for student and employee accounts as a protective measure.

The BYOD gang subsequently claimed that it had stolen student information. That allegation is not equivalent to a confirmed finding by the university.

In comments reported by Recorded Future News, the university described the activity as a potential credential compromise event. It said its current evidence did not indicate a successful compromise of its central Active Directory environment, and that it had no evidence other university data was accessed, changed or stolen.

Those statements and the gang's claims should be reported separately. The available information supports coverage of an investigated incident and a disputed theft allegation; it does not establish the gang's claimed victim count or prove that ransomware encrypted university systems. Further findings could change the picture, so readers should follow the university's official updates.