Skip to main content
Add as a preferred source on Google


District Pays Cyber Ransom as Business Decision

  • By Dian Schaffhauser
  • 09/19/19

A New York school district superintendent has gone public with some of the details of a ransom his school system paid earlier this summer to regain access to school systems. Rockville Schools and its insurance company paid $88,000 in bitcoin through a third-party negotiator. The original ransomware demand was for $176,000, according to Superintendent William Johnson.

In a television interview Johnson said the ransomware demand surfaced in late July when the district's director of technology found something wrong with his email and "pulled the plug" on the network.

While no data ever left the district, according to Johnson, all of the school system's data, telephones and programs became "totally unusable to us in any way whatsoever."

After communicating with local police, the Department of Homeland Security and the Federal Bureau of Investigation, the district called its insurance company, which put school officials "in touch with a person who was a negotiator on our behalf." Ultimately, according to an article in SC Magazine, the district paid $10,000 (the deductible) and the insurance company covered the rest.

While Johnson said that the district considered itself "safe," the particular group behind the Ryuk malware that was used in the incident had algorithms "that were far more sophisticated than anything we had ever seen."

The school system couldn't use backups because, as Johnson explained, the criminals encrypted that first "and then came into the operating system."

In spite of general warnings from the FBI not to pay ransoms in these kinds of situations, the district chose to do so as a business decision, Johnson said. "It was cheaper for us" than to try to recover or rebuild the systems anew.

School districts and local governments have been hard hit. New York's Mineola School District, Idaho's Nampa School District and Arizona's Flagstaff Unified School District have all been victims of ransomware attacks in recent months.

About the Author

Dian Schaffhauser is a former senior contributing editor for 1105 Media's education publications THE Journal, Campus Technology and Spaces4Learning.

Featured

  • Young Woman Programmer Uses Laptop To Analyze Neural Network Models

    AI Leaders Warn of Risks at United Nations Security Council Briefing

    The heads of OpenAI, Anthropic, and Hugging Face recently joined AI researcher Yoshua Bengio at the United Nations headquarters in New York to warn the UN Security Council about the security risks of increasingly capable AI.

  • circuit patterns

    Anthropic Intros Lower-Cost Claude Sonnet 5

    Anthropic has launched Claude Sonnet 5, positioning the model as its most autonomous mid-tier offering to date and a lower-cost alternative to its flagship Opus 4.8 system. The company said the model can plan multi-step tasks, operate tools such as browsers and terminals, and complete agentic work at a level that previously required larger and more expensive models.

  • lock icons, shields, and glowing data paths

    Studies Suggest AI Is Accelerating Familiar Cyber Attacks

    Research released around the recent Black Hat USA 2026 conference demonstrates that artificial intelligence is increasing the speed and scale of cybersecurity activity without replacing the attack methods defenders already face.

  • Abstract background with digital shield made of data particles glowing blue blocking against cyber attacks

    AI Attacks Push Organizations Toward Autonomous Cybersecurity Defense

    Artificial intelligence is raising the stakes of cyber conflict as attackers use the technology to accelerate reconnaissance, uncover vulnerabilities, and launch attacks faster than many security teams can respond, according to a new report from agentic AI security company Kai.