Districts Hit with Malware over Winter Break

Schools districts in both Washington state and Michigan suffered malware attacks during the winter break.

The Issaquah School District discovered its problem on Sunday, Dec. 22 and immediately turned off websites, email and other programs that were hosted in the district's own data center. Those services run from off-site (Skyward and MySchoolBucks.com) were not affected, according to local reporting. About a week later "most" of the programs had been restored.

"IT has been working around the clock to assess and restore system functionality carefully and methodically," the district stated on its website on Jan. 4. "Internet and email have been restored for the most part, although we do expect some systems to remain offline for a few weeks into the new year." As of Jan. 7, however, the district was still preventing personal computing devices from connecting to the network.

In Michigan, Richmond Community Schools was hit specifically with ransomware on Dec. 27. On its Facebook page, the district said that several servers had been hit, affecting "critical operating systems in the district, including but not limited to heating, telephones, copiers, and classroom technology."

According local reporting, hackers demanded payment of $10,000 in bitcoin and the school was forced to extend it holiday break for an additional two days, as administrators dealt with a "building problem" tied to the attack.

The school chose not to pay the ransom and told local media that it had reported the break-in to state and federal law enforcement. It also assured the community that "no student or staff information has been compromised."

About the Author

Dian Schaffhauser is a former senior contributing editor for 1105 Media's education publications THE Journal, Campus Technology and Spaces4Learning.

Featured

  • Students using laptops in classroom

    Stop Asking Whether Students Can Use AI

    As generative AI has become embedded in the tools students use to search, write, create, translate, organize, and receive feedback, the boundary between "using AI" and "not using AI" has become increasingly difficult to define. More importantly, treating AI use as a binary choice does little to help students understand the different roles AI can appropriately play in learning.

  • abstract malware attack

    Security Researchers Find AI Ransomware Can Now Run Much of an Attack Without Human Help

    Ransomware attacks are becoming more automated, and AI could take that much further, according to cybersecurity company NCC Group's July 2026 threat intelligence report.

  • abstract spiral of multi colored lights

    OpenAI's New Astra Model Reaches Critical Cyber Threshold

    OpenAI has introduced GPT-6 Astra, its most capable broadly deployed model and the first system the company says has reached the "Critical" cybersecurity capability threshold under its Preparedness Framework.

  • Blurred silhouettes of business people in a modern office with a glowing blue network overlay

    Open Secure AI Alliance Moving Under Linux Foundation

    Governance of the Open Secure AI Alliance has moved to the Linux Foundation, giving the initiative what the organizations describe as a neutral home for developing open source tools, shared standards and defensive practices. The Alliance was launched by NVIDIA in July to develop open security technologies for AI systems and agents.