Ah.
Well it can happen all so easily. The servers should have anti-encryption defences... Test files in every folder that are monitored etc etc.
I worked there for many years, and I know university research systems well at many places. They have no defences at all once something is in.