DoppelPaymer ransomware hits Newcastle University, leaks data

[silversurfer]

UK research university Newcastle University says that it will take several weeks to get IT services back online after DoppelPaymer ransomware operators breached its network and took systems offline on the morning of August 30th. The attack is now investigated by the UK Police and the National Crime Agency in cooperation with the Newcastle University IT Service (NUIT).
 
"On Sunday 30 August 2020, we became aware that the University had suffered a serious cyber incident which is causing operational disruption across our networks and IT systems," the university said at the time.
"All University systems - with the exceptions of those listed in the communications (Office365 – including email and Teams, Canvas and Zoom) are either unavailable or available but with limitations.
The university hasn't yet decided if account passwords will also be reset but it says that it may do so based on internal support teams and third party consultants' recommendations.
In an update published today, more than a week since the initial attack, Newcastle University says that "[t]he nature of the problem means this will be an on-going situation for some time and it will take several weeks to address."

The investigation into the incident is still at an early stage. IT colleagues continue to work hard on the systems recovery plan, and to support the Police and the National Crime Agency with their enquiries. However, we will not be able to share further detail on the incident until this initial investigation has concluded. The ICO and Office for Students were notified within 72 hours of the cyber incident being detected. - Newcastle University spokesperson

Read more: https://www.bleepingcomputer.com/news/se...eaks-data/