UT SAN ANTONIO TAKES SYSTEMS OFFLINE AFTER DETECTING CYBER THREAT ACTIVITY

SAN ANTONIO, TX — August 18, 2026 — The University of Texas at San Antonio took several technology systems offline after detecting threat activity near the edge of its academic network shortly before the beginning of the fall semester.

The activity was identified during the weekend, prompting the university’s information technology team to initiate containment procedures. Several services were deliberately disconnected as a security precaution, including portions of the university’s telephone system.

Michael Schnabel, chief technology officer at UT San Antonio, said the activity was contained before it reached the university’s core systems or University Technology Solutions infrastructure.

“At this time, our ongoing investigation has found no evidence that university data was accessed or exfiltrated as a result of this activity,” Schnabel said.

The university has not publicly identified the source of the activity, the initial access method, the systems directly targeted or the security weakness involved. It has also not announced evidence connecting the incident to ransomware, data theft or a specific threat actor.

The absence of identified data access or exfiltration represents the university’s current assessment rather than a final determination. Technical reviews can require additional time as investigators examine system logs, authentication records, network activity and affected devices.

The disruptions arrived during a critical academic period, with fall classes scheduled to begin Wednesday, August 19. UT San Antonio serves more than 43,000 students across five campuses and employs approximately 17,500 people, placing substantial demand on its technology systems during registration, tuition processing and the opening of classes.

The university extended an affected student-payment deadline until Friday as systems remained unavailable or unstable. Adjustments were also made to course wait-list procedures to prevent students from losing enrollment opportunities because of the disruption.

University officials announced plans for students, faculty and staff to reset their account passwords. A subsequent update warned that the password-reset process was experiencing delays, adding another obstacle for users attempting to regain access before classes began.

A university-wide password reset can limit the value of credentials that may have been exposed or collected during suspicious network activity. UT San Antonio has not stated that passwords were stolen or that user accounts were compromised. The reset remains a protective measure taken while the investigation and restoration process continue.

Technology teams must balance service restoration with the need to prevent an affected system from being returned to operation before it has been examined. Restoring services too quickly could preserve malicious access if the complete entry point and scope have not been determined.

Before the postponement was announced, Schnabel said, “With classes beginning this Wednesday, we recognize how important reliable access to university systems and services is for our students, faculty and staff. Our teams are working with great care to ensure that our technology environment is both available and secure as we begin the new academic year.”

The university later postponed the start of fall classes until Monday, August 24.

UT San Antonio has not released a complete list of affected services or a timetable for restoring every system. The university’s decision to take services offline was described as a containment action intended to protect the broader technology environment while security personnel investigated the activity.

The institution’s statement indicates that the detected activity was stopped before reaching its central technology infrastructure. That containment may have reduced the potential scope of the incident, but the university has not declared the investigation complete.

Students, faculty and employees should rely on official university communications for password-reset instructions, payment information, course wait-list changes and restoration notices. Account users should also remain alert for fraudulent emails, text messages or telephone calls attempting to exploit confusion surrounding the disruption.

No individual or organization has been publicly identified by UT San Antonio as responsible for the activity. The university continues working to restore access while determining the origin, scope and technical impact of the incident.

🔥 NOW AVAILABLE! 🔥

‎👉 Eclipsera – Apple Music

Sponsored • TRJ Ads
Inquiries: contact@therealistjuggernaut.com

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE