Updated
Updated · MIT News · Jul 13
MIT Expands Cybersecurity Clinic Through 61-School Consortium as Ransomware Hit 525 U.S. Government Entities
Updated
Updated · MIT News · Jul 13

MIT Expands Cybersecurity Clinic Through 61-School Consortium as Ransomware Hit 525 U.S. Government Entities

1 articles · Updated · MIT News · Jul 13

Summary

  • MIT said its cybersecurity clinic model now reaches beyond campus through a consortium it co-founded in 2021 that has grown to 61 member institutions, while its MITx training modules are publicly available.
  • More than 120 MIT students have completed the clinic, delivering over 40 free vulnerability assessments—mainly for New England municipalities and health-care groups that often lack in-house cyber staff.
  • The expansion targets a worsening threat landscape: the FBI logged an average 2,765 cyberattacks a day against Americans in 2025, and Comparitech counted 525 ransomware attacks on U.S. government entities from 2018 to 2024.
  • MIT’s approach emphasizes “defensive social engineering,” treating cybersecurity as an organizational and human problem as well as a technical one, with low-cost steps like patching, backups, multi-factor authentication and staff training.
  • Faculty say client organizations often use the student reports to win budget support and shape short-, mid- and long-term cyber defenses, extending the clinic’s influence well beyond a single semester.

Insights

Can student-led clinics truly defend our hospitals against sophisticated, AI-powered cyberattacks?
Should hospitals be legally allowed to 'hack back' against ransomware groups holding patient data hostage?

Scaling Cybersecurity Clinics Nationwide: Addressing Ransomware, Skills Gaps, and Critical Infrastructure Protection

Overview

The United States faces a growing array of cyber threats, prompting urgent action from the government and new partnerships with philanthropic organizations. In response, President Biden’s 2021 Executive Order set the stage for bold investments and a comprehensive national cybersecurity strategy. Building on this momentum, the Consortium of Cybersecurity Clinics has emerged, creating a 'gold standard' clearinghouse to centralize and share essential tools and knowledge. This coordinated effort strengthens cybersecurity clinics nationwide, helping them deliver high-quality, tailored support to organizations in need and advancing the country’s overall cyber resilience.

...