Thing is as far as I can Google they have not identified how the network got compromised in the first place? So they are issuing bootable USB sticks for scanni

Thing is as far as I can Google they have not identified how the network got compromised in the first place? So they are issuing bootable USB sticks for scanning computers and manually providing new email (I guess University account) passwords, but how would that prevent the same thing happening again in the same unpatched way next week?