Westfield Schools’ Network Outage Disrupts Classes as INC Ransom Claims Responsibility

· Original article ↗

Summary

A network outage disrupted Westfield Public Schools’ digital services and communications. INC Ransom claimed responsibility and posted files it said were from the district, but neither the group’s role nor the files’ authenticity has been verified.

Key points

  • The outage began one day before INC Ransom’s listing appeared on ransomware[.]live, according to a record indexed by the site.
  • Internet, Wi-Fi, instructional tools, phones and the student information system were affected; schools remained open and used offline activities.
  • The district first attributed the disruption to hardware failure, then said the cause remained under investigation.
  • External telephone service was restored at all district buildings; other systems were still being restored, with no final date announced.
  • INC Ransom’s listing included images that appeared to show employee W-2 forms; a later entry described financial data and contracts.
  • The district has not confirmed a cyberattack, ransomware, data theft or a breach. The files’ authenticity and origin could not be independently verified.

Article Details

Victim Organization
Westfield Public Schools
Incident Type
Districtwide network outage; INC Ransom claimed responsibility, but the district has not confirmed a cyberattack or ransomware incident.
Data Types Exposed
  • Employee Form W-2 wage and tax statements (shown in images associated with the leak-site listing; authenticity and origin unverified)
  • Financial data and contracts (described in a separate leak-site entry; unverified)
Affected Records
Unknown; the district has not disclosed how many people could be affected.
Operational Impact
Internet and Wi-Fi, online instructional tools, clocks, telephone lines, and the student information system—including parent portals, attendance recording, and gradebook access—were disrupted. Schools remained open, and emergency communications continued through an independent method. External telephone service was later restored at every school and district building; restoration of other systems was ongoing.
Ransom Or Extortion
INC Ransom claimed responsibility and listed the district on its leak site, where images appeared to show employee W-2 statements and a later entry described financial data and contracts. The files' authenticity and origin were not independently verified; the source does not establish that the group caused the outage or that the listed material came from the district.
Claim Status
claimed

People

Threat Actors

Related Articles