Skip to main content
Add as a preferred source on Google


District Pays Cyber Ransom as Business Decision

  • By Dian Schaffhauser
  • 09/19/19

A New York school district superintendent has gone public with some of the details of a ransom his school system paid earlier this summer to regain access to school systems. Rockville Schools and its insurance company paid $88,000 in bitcoin through a third-party negotiator. The original ransomware demand was for $176,000, according to Superintendent William Johnson.

In a television interview Johnson said the ransomware demand surfaced in late July when the district's director of technology found something wrong with his email and "pulled the plug" on the network.

While no data ever left the district, according to Johnson, all of the school system's data, telephones and programs became "totally unusable to us in any way whatsoever."

After communicating with local police, the Department of Homeland Security and the Federal Bureau of Investigation, the district called its insurance company, which put school officials "in touch with a person who was a negotiator on our behalf." Ultimately, according to an article in SC Magazine, the district paid $10,000 (the deductible) and the insurance company covered the rest.

While Johnson said that the district considered itself "safe," the particular group behind the Ryuk malware that was used in the incident had algorithms "that were far more sophisticated than anything we had ever seen."

The school system couldn't use backups because, as Johnson explained, the criminals encrypted that first "and then came into the operating system."

In spite of general warnings from the FBI not to pay ransoms in these kinds of situations, the district chose to do so as a business decision, Johnson said. "It was cheaper for us" than to try to recover or rebuild the systems anew.

School districts and local governments have been hard hit. New York's Mineola School District, Idaho's Nampa School District and Arizona's Flagstaff Unified School District have all been victims of ransomware attacks in recent months.

About the Author

Dian Schaffhauser is a former senior contributing editor for 1105 Media's education publications THE Journal, Campus Technology and Spaces4Learning.

Featured

  • large cloud icon on the right in an abstract world above a polygon with a dark blue background

    Cloud Security Alliance Expands Agentic AI Governance Work

    The Cloud Security Alliance (CSA) has announced a series of CSAI Foundation milestones aimed at securing what it calls the agentic control plane, including a new catastrophic risk initiative, CVE Numbering Authority authorization, and the acquisition of two agentic AI specifications.

  • Neon email icon hangs from chain with fishing hook below.

    Report Emphasizes Importance of Building a Security Culture

    While security teams have invested heavily in e-mail protection, endpoint security, and identity controls, new research from Fortra suggests one challenge remains difficult to solve: users.

  • businessman holding tablet with holographic AI icons

    Google Moving AI Agents into Mainstream Product Portfolio

    At its recent I/O developer conference, Google positioned artificial intelligence agents not as a distant research project, but as a product strategy spanning Search, personal assistants, productivity software, developer tools, and smart glasses.

  • person typing on a touch screen schedule plan calendar

    Deadline Extended for ADA Title II Compliance

    Schools working to meet the Americans with Disabilities Act Title II regulations for digital accessibility have received a temporary reprieve: The United States Department of Justice has published an interim final rule to push back the compliance deadline by one year.