Education Maastricht University will resume on January 6 after ransomware infection

Maastricht University will resume the education program on January 6. The major ransomware infection that hit last week has not yet been resolved, but key systems will be usable by then.

Students must change their passwords, but are not allowed to do so from the university’s Wi-Fi network, UM writes in an update about the attack. The university was hit by the Clop ransomware on December 23. As a result, a large part of the Windows systems went offline. Earlier, the university said it had “the highest priority” that education could resume after the Christmas holidays. That is possible, write to the university now. From 2 January ‘some important systems needed for education’ will be available again. These are information systems around timetables, study material via EleUM, and the Student Portal. According to the UM, these have to do with limited functionality.

The scheduled resits will take place in the week of January 6. According to the Executive Board of the UM, there will be an extra resit option for students who found it more difficult to prepare for exams due to the attack, for example because they could no longer access study material. There will also be a leniency scheme for students who have been ‘demonstrably disadvantaged’ by the attack. Details about this are unknown.

University staff and students are no longer allowed to use the computers. The university took all systems offline as a precaution to investigate which were and which were not infected. The university warns students and employees not to do anything on the computers. The school is working with security company Fox-IT to limit the damage. In the meantime, their own system administrators are trying to get as many networks and systems up and running again as possible.

Last week, the university set up a helpline where students, teachers and staff could obtain information. According to the NOS, hundreds of questions have already been received. Many details about the infection, such as the suspected perpetrators or its extent, are not yet known. However, a spokesperson previously said that it concerns the Clop ransomware. It is known for infecting large public institutions and companies. UM is also said to be in contact with the perpetrators, but it is not yet known whether the university is willing to pay the ransom for the ransomware.