As a result of the hack on December 23, 2019, UM was completely paralyzed. A few days later, after consultation with deans and directors and the supervisory board, the decision was made to meet the demands of the hackers. A ransom was paid. The next day they received the key and the repair work could begin, so that education could in any case be resumed reasonably undisturbed on 6 January. Paying the ransom has always been called a “devilish dilemma” by Nick Bos, member of the Executive Board and head of the crisis management team that was set up after the hack.
The Executive Board now writes in a statement that as early as February 2020 a so-called ‘wallet’ containing part of the ransom paid was frozen. The value of the cryptocurrencies found was then 40 thousand euros (at the current rate: approximately 500 thousand euros).
Ultimately, the transaction of the ransom led to a suspect in Ukraine. There, the local authorities carried out a search and spoke with those involved. The investigation eventually paved the way for the OM to confiscate the crypto.
"Very nice work", UM-spokesman Koen Augustijn responds, but with the comment that they do not speak of profit themselves. "The total damage was considerably higher than the amount that is now coming back."
The hackers who carried out the attack have not yet been found. That investigation is still ongoing.