Yeah mate it's very shocking how colleges and universities hire so incompetent IT staff sometimes who can't even ensure minimum level essential security of their network which completely boggles my mind. But I think it's highly possible some teacher downloaded some malicious file or something probably from a fake email sent to the university's inbox. You will be amazed how computer-illiterate some people may be regardless of teaching at a university. But surely this news will bring the attention of hackers to other colleges and universities because they are very easy pickings for ransomware attacks. Plus I have read about universities already gathering Bitcoin funds to hand out to hackers in the event of getting compromised so yeah Bitcoin hackers and thieves have already won the battle.