Cyber Incident Victim: Hillsborough County Public Schools
Date:
Apr 2021
Location:
United States of America
Summary
A cyber-attack targeted Hillsborough County Public Schools, causing system disruptions and a temporary closure of facilities. The incident led to inoperable computer systems and staff voicemail, though virtual learning continued during the outage. The district collaborated with cybersecurity experts and law enforcement, including the FBI, which advised the shutdown to mitigate potential damage, suggesting possible ransomware involvement. Restoration efforts proceeded methodically, but officials could not provide a timeline for full recovery due to ongoing investigations and operational constraints. Limited details were shared publicly to avoid compromising the response.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
In early April 2021, multiple school districts in Somerset County, New Jersey, experienced disruptive cybersecurity incidents. Hillsborough County Public Schools suspended in-person operations on April 12 following a suspected cyber-attack, mirroring an earlier closure at Bernards Township schools on April 7. The attack compromised Hillsborough's computer systems and staff voicemail services, which remained non-operational as of April 13. Despite these disruptions, the district maintained educational continuity through virtual learning platforms accessible to students and staff. Superintendent Lisa Antunes communicated via email on April 13 that the FBI and law enforcement had advised the physical closure to limit organizational damage, indicating potential ransomware involvement. District officials restricted public disclosures about the incident's specifics due to investigative constraints and security concerns.
Hillsborough's technology team collaborated with cybersecurity specialists and law enforcement agencies to methodically restore systems, though no definitive recovery timeline was established. The superintendent emphasized operational restoration as the priority while acknowledging limitations in sharing investigative details with families and staff. Federal law enforcement involvement persisted throughout the response phase, with no public attribution of attackers or confirmation of ransomware at the time of reporting. The incident caused at least two days of physical school cancellations in Hillsborough, compounding the earlier disruption in Bernards Township. Restoration efforts continued without resolution by April 13, leaving critical infrastructure partially inoperative while virtual instruction mitigated academic impacts.