Loading story…
Spokane Public Schools took several online information systems offline after detecting an overnight network security incident, activating crisis-response protocols to determine its scope. The district notified families on Monday morning and said the precautionary shutdown could delay requests for information from teachers and staff.
The district said the known impact was limited to staff at the time of reporting, but the nature and extent of any affected information remain undetermined. Officials have not identified the responsible party, intrusion method, specific systems involved, or whether data was accessed or exfiltrated; the investigation remains ongoing.
See attribution, scope, and your downstream exposure.
2 events from the most recent confirmed update back to the earliest known activity.
Spokane Public Schools reported an overnight network security incident, notified families by email, and took several systems offline as a precaution. The shutdown disrupted services, and the district began investigating the incident; no responsible actor, intrusion method, or data compromise was identified.
Superintendent Adam Swinyard said Spokane Public Schools had initiated crisis-response protocols while its online information systems remained unavailable. Reporting indicated district staff appeared to be affected, but the type and extent of potentially affected information remained undetermined.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See attribution, scope, and whether this vendor sits anywhere in your supply chain.
3 references tracked. Mallory keeps watching after this page renders.
securitymagazine.com
Open sourcemalware.news
Open sourcedatabreaches.net
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Springfield Public Schools in Massachusetts closed for Tuesday after a cyber incident disrupted systems required for essential school operations. Superintendent Dr. Sonia Dinnall announced the closure, which affects district operations while response activities continue. The district is investigating the incident’s scope and using the closure to support containment and recovery efforts. Officials have not identified an attacker, malware family, affected systems, cause of the disruption, or whether data was accessed or stolen.
Sep 8, 2026
A cyberattack forced Colorado’s Salida School District to shut down its network after the intrusion began at about 6:30 a.m. on June 29 and was detected roughly two hours later. The incident damaged locally stored files on some network-connected devices, disrupted central-office administrative operations, and left some files potentially unrecoverable. The district took all systems offline and retained specialists to investigate the attack and restore services safely. Officials said they had no indication that data had been accessed or exfiltrated at the time of disclosure, but forensic work remained ongoing; the district had not identified the attacker, intrusion vector, initial access method, ransomware involvement, or an extortion demand.
Sep 10, 2026
A breach tied to **PowerSchool**, a widely used K-12 software provider, exposed student and teacher information from school districts across the U.S., including New Jersey districts where officials said data on students and educators was stolen in a nationwide cyberattack. Reporting on the incident said the compromise affected records held by schools using the platform, raising concerns about the scale of exposure across the education sector and the security of sensitive K-12 data. Separately, **Spring Lake Park Schools** in Minnesota canceled classes and shut down technology systems after an outside actor gained unauthorized access to district networks in what officials described as a suspected ransomware incident. The disruption affected classes, child care, community education, and after-school programs, while the district worked with third-party cybersecurity experts, state law enforcement, and the **FBI** to contain the intrusion and restore operations; officials later said classes would resume and that they had no evidence at that point that personal information had been affected.
Jun 29, 2026