University officials said users likely kicked off a ransomware attack that infected a dozen personal and shared drives by visiting a compromised website.