{"id":48705,"date":"2022-10-03T14:32:02","date_gmt":"2022-10-03T14:32:02","guid":{"rendered":"https:\/\/packetstormsecurity.com\/news\/view\/33905\/How-Ransomware-Is-Causing-Chaos-In-American-Schools.html"},"modified":"2022-10-03T14:32:02","modified_gmt":"2022-10-03T14:32:02","slug":"how-ransomware-is-causing-chaos-in-american-schools","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/how-ransomware-is-causing-chaos-in-american-schools\/","title":{"rendered":"How Ransomware Is Causing Chaos In American Schools"},"content":{"rendered":"
\n
\n
\"Screen<\/a><\/div>\n

Hacking. Disinformation. Surveillance. CYBER is Motherboard’s podcast and reporting on the dark underbelly of the internet.<\/p>\n<\/div>\n

<\/p>\n

May 19, 2021 was supposed to be just another day at the end of the school year at Sierra College, a community college in Rocklin, California. Instead, hackers hit the school with ransomware<\/a>, throwing it into chaos.<\/p>\n

<\/span><\/p>\n

\u201cWe are experiencing a major cybersecurity event this morning that is impacting the majority of services at Sierra College,\u201d Tom Benton, the school\u2019s chief technology officer, wrote in an email to all staff, which Motherboard obtained through a Freedom of Information request. \u201cSeveral people are reporting ransomware screens on their computer screens to encrypt data. If the message is seen on a computer screen please unplug the computer from the network and do not use the system until further notice.\u201d<\/p>\n

<\/span><\/div>\n

<\/p>\n

Sierra College was just one of 1,043 schools and colleges\u2014part of 62 school districts and the campuses of 26 colleges and universities\u2014hit by ransomware hackers in 2021, according to Emsisoft<\/a>, a cybersecurity company that tracks ransomware incidents. The company reports that, so far in 2022, there have been 27 districts with 1,735 schools hit with ransomware. <\/p>\n

<\/span><\/p>\n

\u201cAttacks on schools are commonplace for one very simple reason: they\u2019re profitable. Like legitimate businesses, when cybercriminal enterprises hit on a strategy that works well, they\u2019ll repeat it over and over,\u201d Brett Callow, a security researcher at Emsisoft, told Motherboard. \u201cThe only way to stop attacks on the education sector is to make them unprofitable, and a big part of that requires bolstering security in schools so that they don\u2019t need to pay.\u201d <\/p>\n

<\/span><\/p>\n

Vice Society (no relation to VICE Media), a notorious ransomware gang, has taken credit for nine ransomware hacks against U.S. schools this year, including one earlier this month that hit Los Angeles Unified School District<\/a>, the second largest district in the United States. The hackers are threatening to release files related to the hack at the end of this week.<\/p>\n

<\/span><\/p>\n

\n

\u201cThis means that there will be no computer or network access available until further notice.\u201d<\/p>\n<\/blockquote>\n<\/div>\n

<\/p>\n

Sierra College holds the dubious honor of having been on both years\u2019 lists. In August of this year, two days before the beginning of the fall semester, the college was hit by another ransomware attack<\/a>, though this one had a limited impact, and just two days later most systems were back up online<\/a>.<\/p>\n

<\/span><\/p>\n

Motherboard filed Freedom of Information requests with 52 public schools, school districts, and colleges for emails and communications related to the ransomware attacks. The documents obtained give an insight into how schools dealt with these incidents: alert staff, put a stop to classes, engage forensic and legal services, sometimes suspend computer and internet access, and attempt to restore normalcy as soon as possible.<\/p>\n

<\/span><\/p>\n

It took more than two weeks<\/a> for Sierra College to clean up the damage and have most of its systems back up and running. In the meantime, school officials sent regular emails updating staff about the progress in remediating the attack.<\/p>\n

<\/span><\/p>\n

\u201cEvery Sierra College employee and student will be asked to play an important role by resetting their password once systems become available,\u201d read another email from Benton. <\/p>\n

<\/span><\/div>\n

<\/p>\n

Instead of paying the ransom, the school decided to replace the encrypted hard drives, ordering 300 new hard drives for a total of $18,667.94, according to the emails.<\/p>\n

<\/span><\/p>\n

\n

Are you part of a ransomware group? Or do you track ransomware hackers and their activities? We\u2019d love to hear from you. You can contact Lorenzo Franceschi-Bicchierai securely on Signal at +1 917 257 1382, Wickr\/Telegram\/Wire @lorenzofb, or email lorenzofb@vice.com<\/strong><\/em><\/p>\n<\/blockquote>\n

<\/p>\n

Corry Area School District in northwestern Pennsylvania had to make the same decision, as \u201cthe district IT staff along with the local police and an outside agency investigated the issue and concluded that the data is not restorable from the servers,\u201d according to emails obtained by Motherboard. \u201cThis means that there will be no computer or network access available until further notice.\u201d<\/p>\n

<\/span><\/p>\n

The aftermath of the hack at Sierra College was chaotic. <\/p>\n

<\/span><\/p>\n

\u201cI\u2019m doing a presentation on the Chancellor\u2019s Office webinar this morning. Hopefully it doesn\u2019t pop up on my screen! Lol,\u201d Willy Duncan, the president of Sierra College, wrote to Benton on the day of the hack, referring to the ransomware request screen. \u201cScary stuff, it\u2019s been happening so often lately across so many businesses.\u201d<\/p>\n

<\/span><\/p>\n

Two days later, a student emailed Benton asking for help after their computer started \u201cacting funny\u201d and they couldn\u2019t log into his college account. <\/p>\n

<\/span><\/div>\n

\n
\n

\u201cIf I could remember how I reset my password, I\u2019d tell you.\u201d<\/p>\n<\/blockquote>\n

<\/p>\n

Benton emailed a colleague asking her to follow up with the student and \u201cconfirm the current cybersecurity issue we are experiencing is not transmitted to other computers unless they are District computers on our network and on campus.\u201d<\/p>\n

<\/span><\/p>\n

\u201cThe last thing we need is people to start blaming their personal PC issues on our cyber attack,\u201d Benton wrote. <\/p>\n

<\/span><\/p>\n

A couple of weeks after the attack, John Deaderick, a professor, emailed Benton saying he was able to update his password without having to use two-factor authentication. <\/p>\n

<\/span><\/p>\n

\u201cI\u2019m interested in understanding how you were able to reset your password without having a device available to get the pin # required to reset your password,\u201d Benton responded.<\/p>\n

<\/span><\/p>\n

\u201cThank you Tom. If I could remember how I reset my password, I\u2019d tell you,\u201d Deaderick said. <\/p>\n

<\/span><\/p>\n

\u201cLol! Fair enough,\u201d Benton quipped back. <\/p>\n

<\/span><\/p>\n

Ironically, the hack on Sierra College happened just a couple of weeks after Benton emailed a listserv of chief information security officers working in the education sector, asking if anyone had recommendations for mandatory cybersecurity courses for staffers. <\/p>\n

<\/span><\/p>\n

How the Cloud Can Stop Ransomware<\/strong><\/p>\n

<\/span><\/p>\n

The ransomware attacks did not impact all schools the same way. For example, when hackers infected the systems of Victor Central School District in New York<\/a>, they did force the school to close, but several of the school\u2019s systems were not impacted because they were hosted on cloud-based systems, and other systems were backed up and so relatively easy to restore, according to internal emails.<\/p>\n

<\/span><\/div>\n

<\/p>\n

Still, after the attack, Kelli Eckdahl, the director of the school\u2019s educational technology wrote in an email that the \u201cDistrict is completely disconnected from the Internet, cannot bring back up until it\u2019s clean and state says ok (they will ask us), we have to do things in a certain order to ensure it\u2019s clean.\u201d <\/p>\n

<\/span><\/p>\n

\u201cAt this point, any machine that connects to district network will become infected – we have disconnected all machines in district to prevent any additional spread,\u201d Eckdahl wrote. \u201cEverything has been disconnected to the network and will need to be wiped out and reinstalled upon verification of clean data.\u201d<\/p>\n

<\/span><\/p>\n

Relying on cloud services, or using Chromebooks that are essentially machines that only run a browser, are ways schools can avoid severe damage when hackers hit. Another is to have backups that are on a separate network, meaning they don\u2019t get hit when ransomware infects the other machines. That\u2019s what happened to Affton High School in Missouri<\/a>, which didn\u2019t even have to consider paying hackers given that their backups were not impacted by the ransomware. <\/p>\n

<\/span><\/p>\n

Requests Denied<\/strong><\/p>\n

<\/span><\/p>\n

Unlike Sierra College, Victor Central School District, and the Corry Area School District, some other public schools denied Motherboard\u2019s FOIA requests. <\/p>\n

<\/span><\/p>\n

Some, like Logansport Community School in Indiana, and Mesquite Independent School District in Texas argued that \u201call of the information at issue consists of information that was created to mitigate a cybersecurity incident. Release of the information could and would afford future threat actors the means by which to mount future ransomware attacks against the District and will subject the District to further scrutiny and potential targeting by threat actors and as such is not subject to disclosure.\u201d<\/p>\n

<\/span><\/div>\n

<\/p>\n

A representative of the Hazleton Area School District in Pennsylvania denied the FOIA request citing a part of the state\u2019s Right To Know Act that excludes some documents from disclosure such as \u201cdocuments or data relating to computer hardware, source files, software and system networks that could jeopardize computer security by exposing a vulnerability in preventing, protecting against, mitigating or responding to a terrorist attack.\u201d <\/p>\n

<\/span><\/p>\n

Another school district, the Manhasset Union Free School District, denied the request to release documents alleging that the documents are exempt because \u201cdisclosure would interfere with law enforcement investigations.\u201d<\/p>\n

<\/span><\/p>\n

Several others, such as Allen Independent School District in Texas, the Union School District in Iowa, and Whitehouse Independent School District, in Texas argued that they couldn\u2019t release the documents because all communications about the incident were protected by attorney-client confidentiality given that the school cc\u2019ed a legal firm in emails about the ransomware attack. <\/p>\n

<\/span><\/p>\n

\n

\u201cThe public should be able to know what is happening in these schools and how it’s affecting them.\u201d<\/p>\n<\/blockquote>\n

<\/p>\n

These denials leave a gap in transparency and the public\u2019s understanding of the way schools have had to deal with ransomware attacks.<\/p>\n

<\/span><\/p>\n

Adam Marshall, the senior staff attorney at the Reporters Committee for Freedom of the Press, and an expert in FOIA requests, said that this is a common practice that can be legitimate, but it has also been abused so that government entities \u201ccan later argue that those communications are privileged.\u201d<\/p>\n

<\/span><\/div>\n

<\/p>\n

\u201cSimply copying a law firm on emails is not enough as a general matter to establish the attorney-client privilege,\u201d Marshall told Motherboard in a phone call, explaining that the communications that could be protected can only be those related to \u201cobtaining legal advice or legal services.\u201d<\/p>\n

<\/span><\/p>\n

Knowing how ransomware is hitting and affecting schools \u201cis immensely important for the public to know more about, for the parents in these jurisdictions to know more about, for the students in these jurisdictions to know more about,\u201d Marshall said. \u201cThe public should be able to know what is happening in these schools and how it’s affecting them.\u201d<\/p>\n

<\/span><\/p>\n

Moreover, Marshall added, even if the communications are indeed protected by attorney-client privilege, the government organization involved can still decide to disclose and publish the relevant documents, it is at the discretion of these entities. <\/p>\n

<\/span><\/p>\n

In the case of Sierra College, the school did not claim this privilege, and released several emails that detail how the school dealt with the ransomware attack that almost paralyzed it for days. <\/p>\n

<\/span><\/p>\n

Roughly two weeks after getting hit by ransomware, Sierra College came back online. <\/p>\n

<\/span><\/p>\n

\u201cThis week we restored most of our systems and are getting back to our focus on teaching and learning,\u201d the school wrote in a statement<\/a>. \u201cThis was an attack directed at our networks and impacted several servers as well as hundreds of desktop computers.  As part of the attack, some information was encrypted by malicious software, malware, that limited our access to important information.  Through multiple processes we now have access to most of that information and have been able to bring most services back online.\u201d <\/p>\n

<\/span><\/p>\n

Sign up for Motherboard\u2019s daily newsletter<\/a> for a regular dose of our original reporting, plus behind-the-scenes content about our biggest stories.<\/strong><\/em><\/p>\n

<\/span><\/div>\n

READ MORE HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

READ MORE HERE…<\/p>\n","protected":false},"author":2,"featured_media":48706,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[60],"tags":[1489],"class_list":["post-48705","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-packet-storm","tag-headlinemalwarecybercrimefraudcryptography"],"yoast_head":"\nHow Ransomware Is Causing Chaos In American Schools 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/how-ransomware-is-causing-chaos-in-american-schools\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How Ransomware Is Causing Chaos In American Schools 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/how-ransomware-is-causing-chaos-in-american-schools\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2022-10-03T14:32:02+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/video-images.vice.com\/topics\/57a205628cb727dec795a6b1\/callout_logo\/1614199980283-screen-shot-2021-02-24-at-34918-pm.png?resize=240:*\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"9 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/how-ransomware-is-causing-chaos-in-american-schools\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/how-ransomware-is-causing-chaos-in-american-schools\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"How Ransomware Is Causing Chaos In American Schools\",\"datePublished\":\"2022-10-03T14:32:02+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/how-ransomware-is-causing-chaos-in-american-schools\\\/\"},\"wordCount\":1859,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/how-ransomware-is-causing-chaos-in-american-schools\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2022\\\/10\\\/how-ransomware-is-causing-chaos-in-american-schools.jpg\",\"keywords\":[\"headline,malware,cybercrime,fraud,cryptography\"],\"articleSection\":[\"Packet Storm\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/how-ransomware-is-causing-chaos-in-american-schools\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/how-ransomware-is-causing-chaos-in-american-schools\\\/\",\"name\":\"How Ransomware Is Causing Chaos In American Schools 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/how-ransomware-is-causing-chaos-in-american-schools\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/how-ransomware-is-causing-chaos-in-american-schools\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2022\\\/10\\\/how-ransomware-is-causing-chaos-in-american-schools.jpg\",\"datePublished\":\"2022-10-03T14:32:02+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/how-ransomware-is-causing-chaos-in-american-schools\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/how-ransomware-is-causing-chaos-in-american-schools\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/how-ransomware-is-causing-chaos-in-american-schools\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2022\\\/10\\\/how-ransomware-is-causing-chaos-in-american-schools.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2022\\\/10\\\/how-ransomware-is-causing-chaos-in-american-schools.jpg\",\"width\":240,\"height\":238},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/how-ransomware-is-causing-chaos-in-american-schools\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"headline,malware,cybercrime,fraud,cryptography\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/tag\\\/headlinemalwarecybercrimefraudcryptography\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"How Ransomware Is Causing Chaos In American Schools\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"How Ransomware Is Causing Chaos In American Schools 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/how-ransomware-is-causing-chaos-in-american-schools\/","og_locale":"en_US","og_type":"article","og_title":"How Ransomware Is Causing Chaos In American Schools 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/how-ransomware-is-causing-chaos-in-american-schools\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2022-10-03T14:32:02+00:00","og_image":[{"url":"https:\/\/video-images.vice.com\/topics\/57a205628cb727dec795a6b1\/callout_logo\/1614199980283-screen-shot-2021-02-24-at-34918-pm.png?resize=240:*","type":"","width":"","height":""}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"9 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/how-ransomware-is-causing-chaos-in-american-schools\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/how-ransomware-is-causing-chaos-in-american-schools\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"How Ransomware Is Causing Chaos In American Schools","datePublished":"2022-10-03T14:32:02+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/how-ransomware-is-causing-chaos-in-american-schools\/"},"wordCount":1859,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/how-ransomware-is-causing-chaos-in-american-schools\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2022\/10\/how-ransomware-is-causing-chaos-in-american-schools.jpg","keywords":["headline,malware,cybercrime,fraud,cryptography"],"articleSection":["Packet Storm"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/how-ransomware-is-causing-chaos-in-american-schools\/","url":"https:\/\/www.threatshub.org\/blog\/how-ransomware-is-causing-chaos-in-american-schools\/","name":"How Ransomware Is Causing Chaos In American Schools 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/how-ransomware-is-causing-chaos-in-american-schools\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/how-ransomware-is-causing-chaos-in-american-schools\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2022\/10\/how-ransomware-is-causing-chaos-in-american-schools.jpg","datePublished":"2022-10-03T14:32:02+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/how-ransomware-is-causing-chaos-in-american-schools\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/how-ransomware-is-causing-chaos-in-american-schools\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/how-ransomware-is-causing-chaos-in-american-schools\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2022\/10\/how-ransomware-is-causing-chaos-in-american-schools.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2022\/10\/how-ransomware-is-causing-chaos-in-american-schools.jpg","width":240,"height":238},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/how-ransomware-is-causing-chaos-in-american-schools\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"headline,malware,cybercrime,fraud,cryptography","item":"https:\/\/www.threatshub.org\/blog\/tag\/headlinemalwarecybercrimefraudcryptography\/"},{"@type":"ListItem","position":3,"name":"How Ransomware Is Causing Chaos In American Schools"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/48705","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=48705"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/48705\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/48706"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=48705"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=48705"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=48705"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}