MSU Investigates Cyber Threat, Resets Passwords
Michigan State University asked users to reset NetID passwords after a ransomware group claimed to have stolen data on 1.3 million past and present Spartans.
Updated on Nov. 6, 2026 in Cybersecurity
Live Poll
Do you trust your local universities to adequately protect your personal data?
Michigan State University is investigating a potential cybersecurity threat and sent an October 1 email prompting users to reset their NetID passwords. The ransomware group BYOD has publicly claimed it stole data belonging to 1.3 million past and present Spartans.
Why it matters
The claim, if accurate, would affect a very large group of current and former students, faculty, and staff in East Lansing and beyond. The university has not confirmed that BYOD is responsible for the current threat.
The ransomware group BYOD claims to have stolen data on 1.3 million past and present Spartans, a figure the university has not verified. Michigan State has not determined whether any personal information was compromised.
The players
Michigan State University
A public research university in East Lansing, Michigan, founded in 1855 and one of the largest universities in the United States.
BYOD
A ransomware group that publicly claimed it stole data belonging to 1.3 million past and present Spartans.
The details
On October 1 at 5 p.m., MSU emailed all users prompting them to reset NetID passwords, citing suspicious cybersecurity activity. MSU IT, cybersecurity partners, law enforcement, and the State of Michigan are working on the investigation.
Timeline
October 1, 2026: MSU emails users prompting NetID password resets over suspicious activity.
November 6, 2026: Reports surface of the BYOD data theft claim and the ongoing MSU investigation.
The Tech Race
The MSU incident follows a pattern of ransomware groups publicly announcing data theft claims before victims have confirmed a breach. Such claims are used to pressure universities and other large institutions that hold extensive personal records.
Current and former Spartans who use NetID should reset their passwords as MSU requested. Users should watch for official university notices, since the university has not yet determined whether personal information was compromised.
The takeaway
Reset your NetID password if MSU has asked you to, and treat unexpected university emails with caution while the investigation continues. Confirmed findings will determine whether any personal data was actually exposed.
Further reading
For more on how institutions respond to threats like this, see Cybersecurity coverage on Wisevoter.
Source note: This article includes information reported by WBMA.
Live Poll
Do you trust your local universities to adequately protect your personal data?
