US Gov Sues Georgia Institute of Technology for Cybersecurity Violations
justice.gov
justice.gov
It's quite common for universities to acquire government contracts. It's not so common to fail to meet the NOC, SOC, and/or Endpoint Protection requirements entailed in those contracts. It's even less common to lie to DoD about it.
If you want the money and the prestige, maintain compliance. It's not that difficult.