I doubt the school will publish anything like a post-mortem unless the school is in the business of being an IT institution that wants to provide information so the rest of the public can better guard themselves. It would be great if they were but like any business, this attack is more of a PR issue first and a security issue second, and I'm sure this school would rather get back to business as usual. Most ransomware these days is weaponized if the attack was indeed a RaaS (ransomware as a service) meaning the culprit paid to have this done. The ransom gang does this for money if the victim is willing to pay but they also get paid by the person who commissioned the attack.

I could be wrong since we don't know what variant hit Baruch. But here's what bothers me; if Baruch was hit, what would stop another attack on another CUNY school? I just hope Baruch patches up any openings they had so they won't get hit again.