Confusion Swirls as IU Cybersecurity Expert Faces False Detainment Rumors

Confusion Swirls as IU Cybersecurity Expert Faces False Detainment Rumors

• Rumors spread: Social media posts claimed a prominent IU cybersecurity professor had been arrested.
• Lawyer responds: The professor’s attorney said he had not been arrested or detained.
• Lesson for readers: Unverified claims travel fast online, especially in security circles.

How the rumors started

In early April 2025, posts spread online claiming that Indiana University (IU) cybersecurity professor XiaoFeng Wang had been detained. They followed FBI and Homeland Security searches of two homes linked to Wang and his wife, Nianli Ma, on March 28. IU ended Wang’s employment the same day. With no official explanation, speculation filled the gap.

What his lawyer said

IU declined to comment, saying it would not discuss the investigation at the FBI’s direction. The clarification came from the couple’s attorney, Jason Covert of Taft Law. In a statement to reporters, the lawyers said: “neither Prof. Wang nor Ms. Ma have been arrested and both are currently safe. Further, there are no pending criminal charges as far as we are aware.” The statement slowed the rumors, though the reason for the searches remained unclear.

How misinformation spreads in security circles

The episode showed how fast claims can spread without anyone checking them, even among security professionals who should know better. Posts about the case were reshared widely before any official source had said a word.

Rumors like these can damage a person’s reputation long before facts come out. Readers should look for a named source before passing a claim along.

What universities can do

Universities can help by saying what they can, when they can. IU’s silence, which it said the FBI had requested, left space for speculation that a short factual statement might have narrowed.

Check before you share

Wang’s case is a reminder to check claims before sharing them. Even well-connected accounts get things wrong, and a false post about an arrest can follow someone for years. Security teams already verify alerts before acting on them. The same habit is worth applying to news.

Fred Templeton, CISA, CASP, SEC+

Fred Templeton is a practicing Information Systems Auditor in the Washington DC area. Fred works as a government contractor and uses his skills in cyber security to make our country's information systems safer from cyber threats. Fred holds a master's degree in cybersecurity and is currently working on his PHD in Information Systems.