Heriot Watt University Knocked Offline For A Week

Edinburgh’s Heriot-Watt University has suffered a serious cyber attack taking down IT systems for more than a week. The management has declared a ‘security incident’ involving a malware onslaught had affected a VPN used by staff and students for remote learning but stressed the issue had been ‘contained’.

Internal directories, financial services and student records are also reported to have been affected  in the incident which was first detected on 15th March.

Specialist officers from Police Scotland’s cyber crime unit are investigating, however the university has stressed there is no suggestion of any data leak. The university says it is now “strengthening” its online security protocols to guard against any future attacks. The 200-year-old institution's IT team first referred to the crisis as a "security incident" but now has confirmed that it was a cyber attack.

Status checkers on the higher education facility’s website lists ten systems, including a finance programme linked to their Dubai campus, remain ‘unavailable’.

A ‘resource booker,’ allowing staff and students to secure rooms and sign out equipment is also down alongside a point of sale programme used for on-site canteens. A spokesperson for the university said all users had been safely moved onto alternative systems until the issue can be rectified. They added: “We can confirm that some of our online systems were subject to a cyber-attack last week... The incident was contained immediately and staff and students alerted to allow them to be supported using alternative systems... We are working closely with Police Scotland and specialist advisers to investigate the cause of the incident which will allow us to further strengthen our future security.”

The British National Cyber Security Centre (NCSC) had previously warned universities to be “vigilant” against malicious online threats following an increase in ransomware attacks as in-person learning returned amid the coronavirus pandemic.

The University of the Highlands and Islands was previously forced to shut down its physical and remote campus last year after being targeted by an unknown source. 

The university says it is now “strengthening” its online security protocols to guard against any future attacks.
Heriot-Watt is certainly not the first university to suffer a cyber attack. The University of Hertfordshire was forced to pull the plug on its systems after an incident of it own. Other establishments, including Newcastle University, were also the focus of cyber criminals.

STV:      Edinburgh Live:      Daily Record:        The Register:     Hack Notice:    PiPaNews

You Might Also Read: 

Education Should Focus On Cyber Security:

 

« Multimillion-Dollar Business Email Fraud Gang Arrested
The Metaverse Will Have An Impact On Privacy & Security »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

Authentic8

Authentic8

Authentic8 transforms how organizations secure and control the use of the web with Silo, its patented cloud browser.

Practice Labs

Practice Labs

Practice Labs is an IT competency hub, where live-lab environments give access to real equipment for hands-on practice of essential cybersecurity skills.

CSI Consulting Services

CSI Consulting Services

Get Advice From The Experts: * Training * Penetration Testing * Data Governance * GDPR Compliance. Connecting you to the best in the business.

Syxsense

Syxsense

Syxsense brings together endpoint management and security for greater efficiency and collaboration between IT management and security teams.

North Infosec Testing (North IT)

North Infosec Testing (North IT)

North IT (North Infosec Testing) are an award-winning provider of web, software, and application penetration testing.

Senetas

Senetas

Senetas is a leading developer and manufacturer of certified high-assurance encryption solutions, dedicated to protecting network transmitted data without compromising performance.

IntelliGO Networks

IntelliGO Networks

IntelliGO Networks is a cybersecurity company focused on Managed Detection and Response (MDR).

Westermo Network Technologies

Westermo Network Technologies

Westermo designs and manufactures robust, resilient and secure data communications products for mission-critical industrial systems.

Sage Designs

Sage Designs

Sage Designs is a provider of SCADA, Security & Industrial Automation products and training programs.

Safe Security

Safe Security

Safe Security (formerly Lucideus) provides Cyber risk assessment services and platforms to multiple Fortune 500 companies and governments across the globe.

ACROS Security

ACROS Security

ACROS Security is a leading provider of security research, real penetration testing and code review for customers with the highest security requirements.

Qasky

Qasky

Anhui Qasky Quantum Technology Co. Ltd. (Qasky) is a new high-tech enterprise engaged in quantum information technology industrialization in China.

Nettoken

Nettoken

Nettoken is the first identity management platform designed for everyday internet users, to encourage awareness and control of our ever expanding digital footprint and personal cybersecurity.

Tetrad Digital Integrity (TDI)

Tetrad Digital Integrity (TDI)

TDI is a world-class consulting firm offering cybersecurity services to government agencies and commercial clients around the world.

Eureka Technology Partners

Eureka Technology Partners

Eureka Technology Partners are committed to helping you focus on your business by taking care of your IT infrastructure and data security needs.

TRU Staffing Partners

TRU Staffing Partners

TRU Staffing Partners is an award-winning contract staffing and executive search firm for cybersecurity, eDiscovery and privacy companies and professionals.

ON-DEMAND WEBINAR: What Is A Next-Generation Firewall And Why Does It Matter

ON-DEMAND WEBINAR: What Is A Next-Generation Firewall And Why Does It Matter

See how to use next-generation firewalls (NGFWs) and how they boost your security posture.

Next DLP

Next DLP

Next DLP (formerly Jazz Networks) is a leading provider of insider risk and data protection solutions.

RADICL

RADICL

RADICL's mission is to give SMBs that serve America's Defense Industrial Base (DIB) access to strong, enterprise-grade cyber security protection.

Lakera

Lakera

Lakera empowers developers and organizations to build GenAI applications without worrying about AI security risks.

Vorlon

Vorlon

Vorlon's agentless patent-pending solution facilitates risk profiling of apps, and provides AI-driven behavioral analytics with response recommendations.