Heriot Watt University Knocked Offline For A Week

Edinburgh’s Heriot-Watt University has suffered a serious cyber attack taking down IT systems for more than a week. The management has declared a ‘security incident’ involving a malware onslaught had affected a VPN used by staff and students for remote learning but stressed the issue had been ‘contained’.

Internal directories, financial services and student records are also reported to have been affected  in the incident which was first detected on 15th March.

Specialist officers from Police Scotland’s cyber crime unit are investigating, however the university has stressed there is no suggestion of any data leak. The university says it is now “strengthening” its online security protocols to guard against any future attacks. The 200-year-old institution's IT team first referred to the crisis as a "security incident" but now has confirmed that it was a cyber attack.

Status checkers on the higher education facility’s website lists ten systems, including a finance programme linked to their Dubai campus, remain ‘unavailable’.

A ‘resource booker,’ allowing staff and students to secure rooms and sign out equipment is also down alongside a point of sale programme used for on-site canteens. A spokesperson for the university said all users had been safely moved onto alternative systems until the issue can be rectified. They added: “We can confirm that some of our online systems were subject to a cyber-attack last week... The incident was contained immediately and staff and students alerted to allow them to be supported using alternative systems... We are working closely with Police Scotland and specialist advisers to investigate the cause of the incident which will allow us to further strengthen our future security.”

The British National Cyber Security Centre (NCSC) had previously warned universities to be “vigilant” against malicious online threats following an increase in ransomware attacks as in-person learning returned amid the coronavirus pandemic.

The University of the Highlands and Islands was previously forced to shut down its physical and remote campus last year after being targeted by an unknown source. 

The university says it is now “strengthening” its online security protocols to guard against any future attacks.
Heriot-Watt is certainly not the first university to suffer a cyber attack. The University of Hertfordshire was forced to pull the plug on its systems after an incident of it own. Other establishments, including Newcastle University, were also the focus of cyber criminals.

STV:      Edinburgh Live:      Daily Record:        The Register:     Hack Notice:    PiPaNews

You Might Also Read: 

Education Should Focus On Cyber Security:

 

« Multimillion-Dollar Business Email Fraud Gang Arrested
The Metaverse Will Have An Impact On Privacy & Security »

Infosecurity Europe
CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

DigitalStakeout

DigitalStakeout

DigitalStakeout enables cyber security professionals to reduce cyber risk to their organization with proactive security solutions, providing immediate improvement in security posture and ROI.

Directory of Cyber Security Suppliers

Directory of Cyber Security Suppliers

Our Supplier Directory lists 8,000+ specialist cyber security service providers in 128 countries worldwide. IS YOUR ORGANISATION LISTED?

TÜV SÜD Academy UK

TÜV SÜD Academy UK

TÜV SÜD offers expert-led cybersecurity training to help organisations safeguard their operations and data.

E-Tech

E-Tech

E-Tech has been providing system support and information technology consulting services including Internet and Network Security assessments.

Micro Systemation AB (MSAB)

Micro Systemation AB (MSAB)

MSAB is a leader in the provision of forensically secure tools for the extraction and analysis of data from mobile devices.

Digital Forensics Inc (DFI)

Digital Forensics Inc (DFI)

Digital Forensics Inc. is a nationally recognized High Technology Forensic Investigations and Information System Security firm

CCN-CERT

CCN-CERT

CCN-CERT is the Spanish national government computer security incident response centre.

Secure India

Secure India

Secure India provides Forensic Solutions that help Government and Business in dealing with prevention and resolution of Cyber related threats.

Cybersecurity Philippines CERT (CSP-CERT)

Cybersecurity Philippines CERT (CSP-CERT)

Cybersecurity Philippines CERT is the national Computer Emergency Response Team for the Philippines.

Emerson Electric Co

Emerson Electric Co

Emerson provides industrial automation systems and associated cybersecurity solutions to protect critical process control systems from cyber attack.

Identity Defined Security Alliance (IDSA)

Identity Defined Security Alliance (IDSA)

IDSA is a group of identity and security vendors, solution providers and practitioners that acts as an independent source of education and information on identity-centric security strategies.

European Healthcare Fraud & Corruption Network (EHFCN)

European Healthcare Fraud & Corruption Network (EHFCN)

EHFCN is the only organisation dedicated to combating fraud, corruption and waste in the healthcare sector across Europe.

SAST

SAST

SAST provide Static Application Security Testing as a service based on SAST Tools.

AdEPT Technology Group

AdEPT Technology Group

AdEPT are a managed services and telecommunications provider offering award-winning, proven and uncomplicated technical solutions for over 12,000 organisations across the UK.

Tabidus Technology

Tabidus Technology

Tabidus Technology is a cybersecurity association that unites and provides the global protection options against cyber threats.

Pratum

Pratum

Pratum is an information security services firm that helps clients solve challenges based on risk, not fear.

DH2i

DH2i

DH2i is a leading provider of multi-platform Software Defined Perimeter and Smart Availability software enabling customers to create an entire IT infrastructure that is always-secure and always-on.

iomart Group

iomart Group

iomart is a cloud computing and IT managed services business providing secure hybrid cloud, network connectivity, data management, and digital workplace capability.

APIsentry

APIsentry

APIsentry is a leading provider of comprehensive API security solutions, specializing in protecting organizations from a wide range of cyber threats targeting their Application Programming Interfaces.

CESAR

CESAR

CESAR is one of the premier R+D and innovation centers in Brazil and a designated Cybersecurity Competence Center.

Blue Mantis

Blue Mantis

Blue Mantis is a security-first, IT solutions and services provider with a 30+ year history of successfully helping clients achieve business modernization.