Florida Memorial University (FMU), South Florida’s only historically Black college or university, has reportedly fallen victim to a cybersecurity breach by the ransomware group known as INC Ransom. The specifics of the data compromised during this incident remain uncertain, and the university has yet to issue a formal statement regarding the breach.
In a disturbing display of its malicious capabilities, INC Ransom has uploaded a “proof pack” on its website, showcasing scans of passports, Social Security numbers and contractual documents, ostensibly sourced from FMU’s databases.
INC Ransom, identified as an emerging threat since mid-2023, has established a reputation for targeting a diverse array of sectors, including IT, health care, education and government. The group is notorious not only for its encryption and data theft but also for its unique approach to extortion, often threatening to publicize alleged unethical practices by the victim organizations.
Notably, FMU hosts a dedicated academic center focused on cybersecurity, providing an array of courses alongside a Bachelor of Science in cybersecurity degree program for those aspiring to enter the field. The university is acknowledged as a National Center of Academic Excellence in Cyber Defense, a distinction awarded by the United States’ National Security Agency (NSA). According to the NSA, the CAE-C designation is conferred on institutions that demonstrate a commitment to cultivating cybersecurity experts poised to enhance the security of the nation’s critical infrastructure.
INC Ransom has conducted multiple attacks predominantly within the United States, with a notable percentage occurring in the U.K. and other nations. Unlike some ransomware operatives, the group opts to leak stolen data publicly if its demands are not met, further endangering the victims’ reputation and operational security.
While FMU has not officially confirmed the cyberattack, experts recommend that students and staff proactively protect their personal information and accounts. This would include updating passwords, diligently monitoring account activities for any unusual transactions, and staying vigilant against phishing attempts that may impersonate FMU or associated entities. Furthermore, in light of potential exposure of Social Security numbers, individuals are encouraged to monitor their credit reports and consider implementing fraud alerts or credit freezes as additional security measures.
The reported incident at FMU, if true, is a stark reminder of the pervasive risks of ransomware attacks, which have significantly disrupted educational operations nationwide, affecting thousands of schools and millions of students. These attacks not only compromise sensitive data but also impede essential educational functions, underscoring the critical need for enhanced cybersecurity measures across the sector.
Reports of the FMU data breach were first made public by two respected cybersecurity and privacy-focused news websites, PrivacyAffairs.com and Comparitech.com.
English 
