GateWay Community College Suffers Ransomware Attack

Victim Profile

On April 3, 2024, GateWay Community College, a prominent higher education institution in the United States, fell victim to a ransomware attack. This cyber assault targeted the server that hosts the MyNMHU Portal, a critical infrastructure component providing access to online classes, course materials, campus email, classroom technology, and payroll systems. GateWay Community College, renowned for its annual film festival that draws both in-person and online attendees, had previously encountered a ransomware attack in October 2019, which significantly disrupted payroll functions and the university's core educational mission.

Vulnerabilities and Impact

Ransomware attacks pose a substantial threat to higher education institutions by disrupting essential services and inflicting financial damage. The recent attack on GateWay Community College led to the cancellation of classes and interruptions in employee payroll systems. The college is currently collaborating with the FBI and various state agencies to address the attack. Preliminary assessments suggest that student and employee data may remain uncompromised, though a thorough investigation is still underway.

Mitigation Strategies

To defend against ransomware threats, higher education institutions must adopt comprehensive cybersecurity measures. Network segmentation, which divides a computer network into subnetworks, can significantly reduce the risk of a widespread system compromise from a single attack. Implementing endpoint detection and response (EDR) software is crucial for early detection and containment of ransomware. Furthermore, educating employees on cybersecurity best practices, including the dangers of phishing links, is essential. Lastly, maintaining updated backup and disaster recovery plans is vital for minimizing the consequences of an attack and negating the need to pay ransoms.

Sources

• GateWay Community College
• Ransomware in Higher Education - CampusGuard. Available at https://www.campusguard.com/ransomware-in-higher-education
• Ransomware Attack Hits New Mexico Highlands University. Available at https://www.nmhu.edu/ransomware-attack-hits-new-mexico-highlands-university/
• Ransomware hits 2 colleges at semester's end. What can others do? Available at https://www.educationdive.com/news/ransomware-hits-2-colleges-at-semesters-end-what-can-others-do/556985/