A cybersecurity incident has forced the University of Texas at San Antonio (UT San Antonio) to postpone the start of the fall 2026 semester by three days. Classes, which were scheduled to begin earlier, are now expected to begin on Monday, August 24, as the institution's technical teams continue to work to restore and strengthen its information systems.
UT San Antonio detected an attempted unauthorized activity over the weekend at the boundaries of its network. While there is no indication that the perpetrators gained access or stole any data, the administration has chosen a proactive and cautious approach, temporarily disabling some services.
Immediate mobilization of security teams
After the suspicious activity was detected, the University Technology Solutions (UTS) department activated incident response procedures, in collaboration with external experts. The priority was to limit the activity and protect the remaining technological infrastructure of the institution.
See also: La Sapienza University suffered a cyberattack
In this context, some systems were temporarily disconnectedin order to control the environment and exclude the possibility of further spread. This practice can cause significant disruptions, but is a common measure in incidents where administrators first want to ensure that the infrastructure is clean before fully restoring services.
The temporary isolation affected, among other things, network connectivity, email, and other essential digital services of the university.
UT San Antonio: Why the start of the semester was delayed
The decision to postpone the start of classes is not necessarily related to the existence of a confirmed data breach. Rather, the university wants to ensure that the services that thousands of students and employees use every day are operational and secure before full academic activity.
Dean Taylor Eighmy said the additional time period will allow technical teams to restore services in an orderly manner and confirm that systems are functioning properly.
This choice also highlights a broader reality for modern universities. The educational process now depends on a large digital ecosystem, from course platforms and email to registration systems, financial services and identification mechanisms. A serious disruption can therefore immediately affect the start of the academic year.
See also: Harvard University investigates data breach allegations
Problems with emails, phones and passwords
The restoration of services is taking place in stages. In an update on August 18, UT San Antonio reported that the password reset system was experiencing delays, while phone systems were also temporarily down.
Technical teams continue to evaluate each service individually before restoring it. This process may seem slow to users, but it reduces the reconnecting of a system before the necessary security checks have been completed.
At the same time, the teaching and administrative staff continue their program as normal, while the IT teams work to restore the infrastructure.
Deadlines for students are extended
The incident also had an impact on enrollment processes. UT San Antonio extended the payment deadline for the fall semester to Friday, August 21 at 5 p.m. Central Time.
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
Meanwhile, students who had received waitlist notifications on August 14 or 15 were automatically re-admitted to the process, maintaining their priority order. Those who still have access to myUTSA can make changes to their course schedule.
One Stop also continues to support students, providing information and updates as more services are restored.
See also: Cyberattack on Columbia University - 870,000 Data Stolen
The investigation remains ongoing
UT San Antonio emphasizes that the unauthorized activity was detected before it affected the central systems. However, the investigation is ongoing and so far no details have been provided on the identity of the perpetrators, the exact method used, or possible motives.
The fact that no evidence of a data breach has been found does not mean that the investigation is complete. Experts will need to examine systems, logs, and network connectionsto determine if there was any unauthorized access.
UT San Antonio is now expected to reopen on August 24, three days later than originally planned. Until then, the priority remains twofold: fully restoring digital services and ensuring that students and staff return to a technology environment that has been tested and strengthened following the incident.
