Ransomware Attack Disrupts Delano Schools; District Says Data May Have Been Stolen
Summary
Delano Public Schools canceled classes after discovering unauthorized system access and ransom messages. The district says data may have been stolen, but its initial assessment found no student or sensitive personal information affected.
Key points
- The district said it discovered unauthorized system access on May 19, with hundreds of pages printed bearing ransom messages.
- Classes were canceled May 20; students returned the next day using Ethernet connections.
- District officials said data was likely stolen, but their initial assessment found no student data or specified sensitive personal information among potentially affected data.
- Investigators identified how the attackers gained access, but officials had not disclosed who was responsible or where they were based.
- The district said the incident was not caused by a student, AI, or a phishing email; authorities including the FBI were aware.
Article Details
- Victim Organization
- Delano Public Schools
- Incident Type
- Ransomware attack involving unauthorized access to district systems
- Data Types Exposed
- District data was reported as likely stolen; officials said the initial assessment did not indicate student data or sensitive personal information such as Social Security numbers, driver's license numbers, bank account information, or medical information.
- Operational Impact
- Classes were canceled on May 20. The district shut down internet access, limiting access to potentially internal servers; students returned to class on May 21 using Ethernet cables.
- Ransom Or Extortion
- Pages printed throughout the district displayed the word "ransom" and an otherwise encrypted message. The article does not report a specific ransom demand, payment, or negotiation.
- Claim Status
- confirmed