Loading story…
Springfield Public Schools in Massachusetts closed for Tuesday after a cyber incident disrupted systems required for essential school operations. Superintendent Dr. Sonia Dinnall announced the closure, which affects district operations while response activities continue.
The district is investigating the incident’s scope and using the closure to support containment and recovery efforts. Officials have not identified an attacker, malware family, affected systems, cause of the disruption, or whether data was accessed or stolen.
See the actors and campaigns active against you right now.
2 events from the most recent confirmed update back to the earliest known activity.
Superintendent Dr. Sonia Dinnall announced that Springfield Public Schools would close on Tuesday to support ongoing incident-response efforts.
Springfield Public Schools experienced a cyber incident that disrupted systems required for essential school operations. Investigators began assessing the scope of the incident; no attacker, malware, or data impact was identified.
See the adversaries and campaigns active against your sector right now, ranked by what they're exploiting.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Spokane Public Schools took several online information systems offline after detecting an overnight network security incident, activating crisis-response protocols to determine its scope. The district notified families on Monday morning and said the precautionary shutdown could delay requests for information from teachers and staff. The district said the known impact was limited to staff at the time of reporting, but the nature and extent of any affected information remain undetermined. Officials have not identified the responsible party, intrusion method, specific systems involved, or whether data was accessed or exfiltrated; the investigation remains ongoing.
Sep 23, 2026
A cyberattack forced Colorado’s Salida School District to shut down its network after the intrusion began at about 6:30 a.m. on June 29 and was detected roughly two hours later. The incident damaged locally stored files on some network-connected devices, disrupted central-office administrative operations, and left some files potentially unrecoverable. The district took all systems offline and retained specialists to investigate the attack and restore services safely. Officials said they had no indication that data had been accessed or exfiltrated at the time of disclosure, but forensic work remained ongoing; the district had not identified the attacker, intrusion vector, initial access method, ransomware involvement, or an extortion demand.
Sep 10, 2026
A cyberattack hit the Patriot Regional Emergency Communications Center in Pepperell, Massachusetts, disrupting computer systems used by town and public safety agencies across several northern Massachusetts communities. Officials said the incident affected police and fire operations in Ashby, Dunstable, Pepperell, Townsend, and other towns served by the regional dispatch hub, while non-emergency and business phone lines were knocked offline. Emergency `9-1-1` services remained operational despite the outage. Municipal officials said they brought in insurance representatives and outside cybersecurity responders and notified federal law enforcement as the investigation began. Authorities are still determining whether any data was accessed or stolen, and no threat actor had publicly claimed responsibility at the time of reporting. The affected center also supports emergency call intake and dispatch and is connected to the CodeRED notification platform, underscoring the continued exposure of municipal and emergency communications systems to disruptive cyber incidents.
Jun 29, 2026