Stanford University failed to detect ransomware intruders for 4 months

Stanford University disclosed that an Akira ransomware attack resulted in the theft of approximately 430 GB of data affecting about 27,000 people; the breach occurred on May 12, 2023 but was not discovered until September 27, 2023, and likely included names and social security numbers. The university engaged law enforcement and external cybersecurity experts, offered 24 months of credit monitoring and ID-theft services to affected individuals, and the data appears to remain available on the attackers' leak site, suggesting a ransom was not paid.