Ransomware

Lincoln College Ransomware Attack (Led to College Closure)

πŸ“… 2021-12-01
Primary Source β†—

Incident Details

Lincoln College, a historically Black liberal arts college in Lincoln, Illinois, founded in 1865 (the same year Abraham Lincoln was assassinated), announced in May 2022 that it would permanently close β€” citing both COVID-19 impacts and a ransomware attack in December 2021 as decisive factors. The ransomware attack in December 2021 disrupted all academic operations and thwarted admissions activities, enrollment, and fundraising efforts, preventing access to all institutional data for months. Recovery from the ransomware attack was not completed until March 2022, at which point the college could assess the ongoing damage. The combination of COVID-19 enrollment impacts and the months-long ransomware disruption to recruitment and financial operations proved unsurmountable: the college determined it could not achieve the enrollment needed to remain viable and announced permanent closure effective May 13, 2022. Lincoln College was one of the oldest historically Black colleges in the US and served a predominantly first-generation, low-income student population. The closure was widely cited as the first known instance of a ransomware attack contributing directly to the permanent closure of an educational institution.

Technical Details

Initial Attack Vector
Ransomware attackers compromised Lincoln College's systems in December 2021, encrypting systems critical to student recruitment, retention, and fundraising operations; the attack prevented access to all institutional data for several months

Timeline

  1. 2021-12-01 Breach occurred
  2. 2022-03-01 Publicly disclosed
  3. 2022-03-01 Customers notified