Ransomware (extortion): School, USA 2021
A ransomware attack in December 2021 paralysed the systems for recruitment, admissions, student retention and fundraising.
- Incident · 12.2021 · Illinois (Lincoln), USA
- Evidence: confirmed by an authority
- Ransomware (extortion)
As of
What happened
The college paid the ransom (according to reports around 100'000 dollars), but the systems were only fully running again in March 2022. Because of the consequences of the attack and the pandemic, the 157-year-old college closed in May 2022.
- Affected
- Lincoln College
- Industry
- School
- Loss
- no reliable figure
- Business interruption
- unknown
- Ransom demanded / paid
- yes / yes
- Data affected
- unknown
- Bankruptcy
- no
- Entry point
- not stated in the sources
What would cyber insurance have paid?
That depends on the terms. Whether those affected were insured: unknown.
-
Loss of income after an attack
Business interruption, only after the waiting period
Mostly covered 7 of 9 business products cover it fully, as an add-on or with limits.
-
Help and negotiation; only some insurers pay the ransom, see note
Mostly add-on 6 of 9 business products cover it fully, as an add-on or with limits.
-
Costs of getting data, software and systems running again
Mostly covered 6 of 9 business products cover it fully, as an add-on or with limits.
Overview based on public policy terms, as of 06.11.2026. Only your policy and its general terms and conditions (GTC) are binding. No confirmation of cover.
What we can learn
Months without visibility of enrolments and income can force a financially weak organisation to close, even if a ransom is paid.
Sources
- College closes down after ransomware attack (opens in a new window) Malwarebytes · 2022-05
- Ransomware attack forces historic Illinois college to close (opens in a new window) TechRadar · 2022-05