The University of Utah released a notification yesterday that they were the victim of a data breach and ransomware attack on July 19^th, 2020. In the notification, they stated that the university’s College of Social and Behavioral Science (CSBS) was the victim of an attack that took their systems offline. As part of the attack, the cybercriminals also stole unencrypted data files before encrypting the server. The new normal is for attackers to steal data before encrypting servers and threaten to release the data if the ransom is not paid. The university decided to work with a cyber insurance provider to pay the ransom since the stolen data included student and faculty information. The university states that their insurance policy paid $457,059.24 and that no “tuition, grant, donation, state, or taxpayer funds were used to pay the ransom.”