Attacked by Vice Society earlier this month, Lewis & Clark finds files with personal information have now been leaked

It appears that Lewis & Clark in Oregon has been the victim of a ransomware attack by Vice Society.

Notice on Lewis & Clark’s website, March 31. Image:

An urgent notice on the college’s website currently says:

Urgent LC Alert: Campus phone service and PioNet Guest Wifi are working. If you are unable to reach Campus Safety at 503-768-7777, call the backup number at 503-593-5457. In an emergency, call 9-1-1. See current list of available network services.
On March 23, the college issued a notice on its site, referring to a “security incident” but never mentioning the word “ransomware” or reporting the receipt of any ransom demand:

March 2023 System Outage

On March 3, 2023, Lewis & Clark experienced an IT security incident which negatively impacted systems and services across our campuses. Our IT team is working around the clock, alongside a team of external experts, to restore services and advise the college about next steps.

Classes and events on campus are continuing as scheduled.

Various IT systems have been fully or partially restored.  We will keep you informed of developments as progress is made, and will update this webpage as new information is available.

Their outage updates page, last updated on March 24, also includes an FAQ. One of the questions was:

We are working with external information technology experts to conduct a detailed technical investigation into the outage. Please keep in mind that our investigation is in the earliest stages and is still ongoing. Restoring normal operations and protecting data integrity are our top priority. We will provide further updates and information as appropriate.

Today, but perhaps as yet unknown to students and employees, Vice Society answered that question by dumping a lot of files on their dark web leak site, including personnel information and student information. Some of the files skimmed by DataBreaches, go back more than a decade. DataBreaches has not really begun analyzing the files yet, but it would appear that the college will have a lot of notifications to make.


About the author: Dissent

Comments are closed.