Nelson University

Nelson University determined that an unauthorized actor had access to its systems for roughly two weeks, with sensitive identity and financial information implicated and later reporting connecting the event to ransomware. The lesson is not that universities need another awareness campaign; it is that unauthorized access was able to persist long enough to become consequential. Systems built around static trust are always giving attackers time they did not earn.