Westfield Schools’ Network Outage Disrupts Classes as INC Ransom Claims Responsibility

Summary
A network outage disrupted Westfield Public Schools’ digital services and communications. INC Ransom claimed responsibility and posted files it said were from the district, but neither the group’s role nor the files’ authenticity has been verified.
Key points
- The outage began one day before INC Ransom’s listing appeared on ransomware[.]live, according to a record indexed by the site.
- Internet, Wi-Fi, instructional tools, phones and the student information system were affected; schools remained open and used offline activities.
- The district first attributed the disruption to hardware failure, then said the cause remained under investigation.
- External telephone service was restored at all district buildings; other systems were still being restored, with no final date announced.
- INC Ransom’s listing included images that appeared to show employee W-2 forms; a later entry described financial data and contracts.
- The district has not confirmed a cyberattack, ransomware, data theft or a breach. The files’ authenticity and origin could not be independently verified.
Article Details
- Victim Organization
- Westfield Public Schools
- Incident Type
- Districtwide network outage; INC Ransom claimed responsibility, but the district has not confirmed a cyberattack or ransomware incident.
- Data Types Exposed
- Employee Form W-2 wage and tax statements (shown in images associated with the leak-site listing; authenticity and origin unverified)
- Financial data and contracts (described in a separate leak-site entry; unverified)
- Affected Records
- Unknown; the district has not disclosed how many people could be affected.
- Operational Impact
- Internet and Wi-Fi, online instructional tools, clocks, telephone lines, and the student information system—including parent portals, attendance recording, and gradebook access—were disrupted. Schools remained open, and emergency communications continued through an independent method. External telephone service was later restored at every school and district building; restoration of other systems was ongoing.
- Ransom Or Extortion
- INC Ransom claimed responsibility and listed the district on its leak site, where images appeared to show employee W-2 statements and a later entry described financial data and contracts. The files' authenticity and origin were not independently verified; the source does not establish that the group caused the outage or that the listed material came from the district.
- Claim Status
- claimed
People
Jeremy BermanWestfield mayor; said schools had an independent method to communicate with the public safety dispatch center.Raymond GonzálezWestfield Public Schools superintendent; said the district initially attributed the disruption to networking hardware failure and later said its cause remained under investigation.
