Classes at Vanderbilt University are proceeding as scheduled today, although access to most university systems remains restricted following a cyberattack claimed by ransomware group BYOD. Vanderbilt announced on Monday morning that it was dealing with "an active cybersecurity incident," and that the fallout may affect university devices, systems, and cloud-based services. The Nashville-based university initially told students and staff to shut down university devices and disconnect from campus Wi-Fi. It warned them to watch for unexpected prompts, altered files or permissions, unfamiliar applications, and unsolicited authentication requests. Campus computers reportedly began playing an audio threat attributed to BYOD. Student newspaper The Vanderbilt Hustler cited posts on campus social network Fizz showing the message. "You have been compromised by BYOD," the recording said. "We suggest you reach out to us as soon as possible. Instructions have been placed on your desktop. Failure to communicate will result in this estate being brought to the ground completely. Make the right choice or rot with the wrong one." By Monday evening, Vanderbilt had restored access to campus Wi-Fi, but warned that access to most systems remains restricted. "We know this has disrupted important work and caused frustration across the university," it said. "Vanderbilt Information Technology is working with government agencies and other partners to manage this situation." Students were told to attend classes as scheduled on Tuesday and contact instructors about flexibility on coursework deadlines. Staff were instructed to report to work normally. Vanderbilt's Athletics department said that its ticketing system was unavailable, and that students were unable to claim tickets for the college's football game against Alabama on Saturday. BYOD claimed responsibility for the attack on Vanderbilt on Monday, along with extensive data theft. "If you could not tell already, your databases are locked [and] we have your entire estate and research data," it said via its leak site. "Over 1 million SSNs, full names, email addresses, phone numbers, student and employee records, full takeover of your DC, whatever was on your network, we possess." Vanderbilt has not confirmed BYOD's claims about the extent of its access or the data allegedly stolen. BYOD may be a familiar name to some. The group previously claimed attacks on the University of New Mexico and Trump Mobile's customer database. BYOD also claimed responsibility on Monday for an attack on Texas Health and Human Services. The agency has not publicly confirmed an incident and did not immediately respond to our questions. ®