Cyber Incident Victim: Prince George's County Public Schools
Date:
Jul 2025
Location:
United States of America
Summary
Prince George's County Public Schools experienced a cybersecurity incident impacting parts of its technology network. The district responded immediately by containing the issue, activating protocols, engaging cybersecurity professionals, and coordinating with law enforcement. Critical safety infrastructure remained operational, but some internal systems, including email, were taken offline as a precaution during restoration. The incident occurred during summer break, avoiding classroom disruption. Families needing to contact staff were advised to call schools directly while systems were restored.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 0 motives | 0 techniques |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On July 7, 2025, Prince George's County Public Schools (PGCPS) Superintendent Dr. Wayne Lyle notified the community of a cybersecurity incident discovered over the preceding Independence Day holiday weekend. Upon identifying the issue impacting parts of the district's technology network, PGCPS took immediate action to contain the incident. The district activated its established response protocols and engaged external cybersecurity professionals to assist with the investigation and recovery process. Coordination with state and federal law enforcement agencies was also initiated to determine the nature and extent of the incident. The timing of the incident during the summer break period, when school buildings were closed, provided the district team with the necessary time and space to focus fully on remediation efforts without disrupting classroom learning.
Critical safety infrastructure, including security systems, building access controls, and phone lines, remained fully operational throughout the incident. However, as a precautionary measure, PGCPS took some internal systems offline to facilitate a deliberate and secure restoration process. This included the district's email server, rendering staff unable to send or receive emails for an unspecified duration. Families needing to contact staff members were directed to call their child's school directly or the school board office. PGCPS acknowledged cyber incidents as an unfortunate and growing challenge for institutions like public school systems and stated the event was being treated as an opportunity to strengthen safeguards and resilience moving forward. The district emphasized its commitment to clear and timely communication, promising to share verified updates and relevant information as the investigation progressed.