UNIVERSITY OF ILLINOIS CHICAGO COLLEGE OF MEDICINE HIT BY RANSOMWARE ATTACK; SOME DATA STOLEN, SYSTEMS RESTORED

The University of Illinois Chicago College of Medicine has been affected by a ransomware attack that disrupted access to some college-specific systems and resulted in the theft of information stored on affected servers.

The university said the incident temporarily limited access to certain College of Medicine systems, but those systems have since been restored. UIC also said its main university network was not affected and that patient care at UI Health was not disrupted.

UIC’s own College of Medicine website separately acknowledged that the college was experiencing technical difficulties affecting access to certain college-specific network services and systems while remediation work was underway.

The university is investigating what information was accessed or removed during the attack and whether the stolen material included personal, research, or academic information.

That is very important because a medical school environment can contain several different categories of sensitive data. Academic records, faculty and staff information, research files, internal administrative material, and credentials may all carry different legal and operational consequences if exposed.

UIC has not publicly confirmed the exact categories of stolen data, the number of individuals potentially affected, or whether protected health information was included.

The university said the incident was reported to law enforcement and that recovery efforts were coordinated with government agencies during the restoration process.

UIC also said individuals will be notified if the investigation determines that their information was stolen.

The College of Medicine maintains its own information-technology operation responsible for services that include file-server management, desktop support, connectivity, application development, software support, instructional technology, and security services for students, faculty, and staff.

The College of Medicine maintains dedicated IT resources alongside UIC’s broader technology infrastructure. UIC has stated that the main university network was not affected by the ransomware incident.

The university has emphasized that the main UIC network remained operational and that the ransomware incident did not interfere with clinical care through UI Health.

That separation is significant because attacks involving medical institutions can create immediate patient-safety concerns when clinical systems are affected. In this case, UIC has stated that patient care delivery continued.

The attack has been claimed by a ransomware group calling itself Booba, which has asserted that it stole approximately 344 gigabytes of data.

That claim has not been independently confirmed by UIC.

Ransomware groups routinely publish claims about victims and alleged data theft as part of extortion campaigns. Those claims can provide useful investigative leads, but they should not be treated as verified until the affected organization, law enforcement, or another authoritative source confirms them.

The reported incident appears to follow a now-common ransomware model in which attackers attempt to do more than encrypt systems.

Modern ransomware operations frequently combine system disruption with data theft, giving attackers an additional source of leverage by threatening to publish or sell stolen information even after an organization restores its systems.

That model changes the recovery process.

Restoring affected systems may return services to operation, but the organization must still determine what attackers accessed, what they copied, how long they were present, what credentials may have been exposed, and whether additional systems were touched before containment.

For UIC, the investigation will therefore extend beyond system restoration.

Security teams will need to determine the initial access point, identify affected hosts and accounts, establish whether privilege escalation or lateral movement occurred, review authentication activity, and determine the exact scope of any data exfiltration.

The university will also have to establish whether stolen information triggers legal notification requirements.

The College of Medicine serves approximately 1,300 students within the broader University of Illinois Chicago system, which enrolls more than 35,000 students across 16 colleges.

A ransomware incident affecting a medical school can carry consequences beyond normal administrative disruption because research environments often contain specialized datasets, grant-related material, intellectual property, academic records, and internal collaboration systems.

There is currently no confirmed evidence that all of those categories were affected in this incident.

The university’s statement indicates that the scope remains under investigation.

The most important confirmed facts are that ransomware affected College of Medicine systems, some information was stolen, affected systems were restored, UIC’s main network was not affected, and patient care at UI Health continued without interruption.

A limited operational impact can significantly reduce disruption even when an attacker succeeds in stealing data from a specific part of an institution.

The remaining risk now centers on the stolen information.

UIC must determine exactly what was taken, whose information was involved, whether attackers retained usable credentials or internal access information, and whether the stolen material creates additional exposure for students, faculty, researchers, or staff.

The university has said affected individuals will be contacted if the investigation confirms that their information was compromised.

The ransomware attack appears to have caused a limited but serious disruption inside the College of Medicine rather than a university-wide outage.

The forensic investigation is not finished.

And until UIC determines exactly what was taken, the full impact of the attack remains unresolved.

---

---

Official University Documentation: University of Illinois College of Medicine, Student Portal Access, confirming technical difficulties affecting college-specific network services and systems while remediation efforts were underway. (Free Download)

---

---

---

DeXpose, Booba Project Strikes University of Illinois Chicago, October 2, 2026. (Free Download)

---

---

---

---

---

---

---

---

---

---

🔥 NOW AVAILABLE! 🔥

‎👉 Eclipsera – Apple Music

---

---

---

---

---