Cyber Incident Victim: Pittsburg Unified School District
Date:
Jan 2020
Location:
United States of America
Summary
A ransomware attack disrupted the Pittsburg Unified School District's network systems, forcing students to rely on non-digital learning methods such as books and direct instruction due to disabled internet servers and email access. The district took affected servers offline, engaged cybersecurity experts and legal counsel, and confirmed no evidence of compromised personal data, with normal operations resuming shortly after. This incident occurred alongside a separate ransomware attack on the Contra Costa County Library System, which remained unresolved with ongoing network outages impacting branch services.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
The Pittsburg Unified School District in Pennsylvania experienced a disruptive ransomware attack during the winter break period preceding January 2020. District network systems, including internet servers and email services, were compromised by the attack, which was publicly disclosed by Superintendent Janet Schulze via social media on Monday night following the break. This disruption forced the district to suspend internet-dependent activities as students returned to classes on Monday, with Schulze announcing a temporary shift to traditional teaching methods using physical books and direct instruction. Critical operational systems remained functional, including student information databases and phone services, allowing schools to maintain basic administrative functions. The district responded by taking all affected servers offline, along with any potentially compromised systems, to contain the attack’s spread.
Normal teaching schedules resumed by Tuesday, though the district’s network systems remained under investigation. Schulze stated there was no evidence of personal data compromise but emphasized the investigation remained ongoing with support from external cybersecurity experts and two unspecified internet technology companies. Legal counsel specializing in ransomware incidents was also engaged to address potential ramifications. The incident marked the second ransomware attack affecting Contra Costa County systems in early January 2020, following a January 3rd attack on the Contra Costa County Library System that caused a network outage impacting services across 26 branches. Library services remained offline at the time of reporting, with public notifications acknowledging the ongoing disruption and investigation. The school district did not disclose ransomware specifics, payment demands, or attribution, citing the preliminary stage of their investigation.