Tshwane University of Technology (TUT) has taken action against Deputy Vice-Chancellor Professor Bhekisipho Twala in response to a significant data breach, which occurred on December 17, 2023, resulting in the theft of “hundreds of thousands” of records.

Allegedly, Twala failed to promptly address the attack or manage its aftermath, with the incident only being reported to South Africa’s Information Regulator on January 4, 2024. Twala, who oversees the institution’s digital transformation portfolio and is renowned as a leading expert in artificial intelligence and data science, has been suspended pending further investigation.

While the culprits behind the breach remain unconfirmed, suspicions point towards the ransomware group Rhysida, known for its involvement in previous cyber attacks, including the one on the British Library in November 2023. Sources cited by News24 revealed that Rhysida notified TUT of the attack by sending a screenshot warning, with backup data on the cloud server accessed and subsequently deleted.

The full extent of the breach is yet to be determined, prompting TUT’s executive to initiate a cyber forensic audit to gather more information. However, staff members purportedly remain uninformed about the incident, with reports of threats issued to those who possess knowledge of the attack.

During ransomware attacks, system files are typically encrypted, and backups may be deleted, leaving behind a “ransom note” demanding payment, often in cryptocurrency, for decryption methods. Furthermore, attackers may engage in exposure extortion by threatening to sell stolen data on the dark web. Despite inquiries from the media, Tshwane University of Technology has yet to provide further details regarding the incident https://www.teiss.co.uk