The University of Texas at Arlington told students and employees that hackers stole personal information from its systems last month. The Record reported on 13 November, citing a university spokesperson, that an investigation confirmed the theft. The Qilin ransomware gang claimed the attack this week, The Record said. When the university announced the attack, it took MachForms offline. That portal handles event sign-ups, service requests and surveys.
The university would not say what information was taken. It is still working out whose data was involved, and it plans to contact those people directly. The Record's report does not say whether MachForms held the stolen data, or how the attackers got in. The portal is still offline, and the school says it keeps watching for further effects.
This is our interpretation, not a finding about this breach. Sign-up and request forms gather personal details as a side effect of everyday work, so nobody may hold a full list of what they store. Budget signers can ask for three things: a list of every form tool and its data, a deletion date for old entries, and a plan to name affected people fast.