Skip to content
Brief Security & Trust ·

UIC medical school hit by ransomware; some data stolen, systems restored

UIC says its College of Medicine systems are restored and some data was stolen, and a gang called Booba claims the attack.

In brief
  • UIC says all affected systems are restored and hackers stole some College of Medicine data. Restored systems do not undo the theft.
  • A gang called Booba claims the attack and 344 GB of data. UIC is still checking what was exposed.

The University of Illinois Chicago (UIC) said it recently found a ransomware attack on its College of Medicine, The Record reported on 5 October. Ransomware locks files until victims pay. A UIC spokesperson told Recorded Future News that hackers also stole some information from the college's servers. The university said all affected systems are restored and its main network was not affected. It said patient care at UI Health was not affected. It told law enforcement and will notify anyone whose information was stolen.

UIC has not said what was taken. It is still checking whether personal, research or academic information was compromised. The report gives no attack date. A gang called Booba claimed the attack last week and said it took 344 gigabytes. SentinelOne's Brett Williams said Booba appears to be a rebrand of Frag ransomware.

UIC says systems are back, yet it also says data was stolen. As general context, not a claim about UIC: some attackers copy files first, then lock them. Backups fix the outage, but cannot recall copies already taken. Ask whether your tools would flag large data leaving your network. Ask whether you know what each server holds. Without both, you cannot say what was exposed.

A WebPulse Brief: a short report of an important event, written by the WebPulse Newsroom with AI assistance and checked against the reporting below. When there is more to explain, we follow up with a full story. How we use AI.

Reporting: The Record.