The virus was tracked back to Russia. Vanderbilt was one of the first to capture the code. This virus hit 5-10 systems in one department. It occurred at the end of a semester, complicating recovery procedures and making quick recovery urgent. It hits on department level exhange servers.
Service is interrupted for several hours.
They do not include other email systems on campus or at Medical. The largest source of attacks come from Korea. Once someone breaks into your system, they will keep coming back over and over. VU Firewall - VU perimeter firewall has been in place since December 1999. The perimeter firewall is a garbage filter with a very open policy.