A ransomware-tracker entry dated November 2, 2026, attributed an alleged attack on Michigan State University to the BYOD group. The entry claimed the group had obtained personal information relating to current and former students and other people connected with the university, along with passwords, but the university had not confirmed the incident in the available sources.
The tracker claimed information for 1.03 million people was involved. That figure and the specific data types, including whether Social Security numbers, medical records, or financial information were exposed, have not been independently confirmed. No official breach notice or regulator filing is established by the available sources.