Vanderbilt Health Restricts Staff from University IT

Vanderbilt University is responding to an active cybersecurity incident affecting its devices, systems, and cloud-based services.

Updated on Nov. 10, 2026 in Cybersecurity

Isometric editorial illustration of closed dark-grey server cabinets in a plain institutional server room, one door ajar, in muted slate, teal, and cream. — Vanderbilt Health barred staff on November 9 from logging into university IT systems or connecting USB drives after the university confirmed an active cybersecurity incident affecting its devices and cloud services. AI Illustration. Upload story photo >

Live Poll

Do you trust local hospitals and universities to protect your personal data?

Vanderbilt Health instructed employees not to access or log into Vanderbilt University IT systems until further notice, after the university confirmed on November 9 that it was responding to an active cybersecurity incident. Vanderbilt Health said its own systems have not been affected, and patient care continues across all its hospitals and clinical locations.

Why it matters

The incident is disrupting access to university systems for students, faculty, and staff in Nashville, while the health system works to keep its own infrastructure insulated. Restrictions on removable media and device use signal how seriously the institutions are treating the threat.

The university has restricted access to most systems and applications while Wi-Fi was restored in a November 9 update. Neither the cause of the incident nor whether any data was compromised has been publicly disclosed.

The players

Vanderbilt University

A private research university in Nashville, Tennessee, known for its medical center and academic programs.

Vanderbilt Health

The academic medical system affiliated with Vanderbilt University, operating hospitals and clinical locations across Nashville.

The details

Vanderbilt Health issued a November 9 alert telling employees not to use or log into university IT systems and not to connect USB drives, laptops, or external storage to them. Students, faculty, and staff were told to shut down university devices, disconnect from campus Wi-Fi, and report suspicious activity, while Vanderbilt Information Technology works with government agencies and other partners.

November 9, 2026: Vanderbilt Health issues its alert and the university confirms an active cybersecurity incident.
November 9, 2026: A later update restores campus Wi-Fi, but most university system access remains restricted.
November 10, 2026: The university is scheduled to operate on a normal schedule.

Seasonal Patterns

The incident follows a pattern in which universities and their affiliated health systems share IT networks, so a breach at one can force the other to isolate itself while continuing patient care. Such isolation measures have become a recurring feature of academic medical campus response plans.

Vanderbilt University students, faculty, and staff in Nashville are currently unable to use most university systems and should report suspicious activity. Restrictions on USB drives and external storage mean users should avoid connecting those devices to university systems until access is restored.

The takeaway

Institutions that share networks between a university and its affiliated health system must plan for isolating clinical operations from campus IT during an incident. Staff should follow the restrictions in their alerts until the university confirms systems are safe to use again.