Ubiqus Group

Summary

A ransomware attack targeted a contractor providing transcript services for New York City's teacher disciplinary system, forcing the shutdown of all IT systems as a precautionary measure. The incident disrupted termination hearings for tenured educators accused of misconduct or incompetence, as transcripts essential to case proceedings became unavailable. The contractor and state authorities initiated an investigation involving a forensic cyberteam, while education officials worked with union representatives to reschedule affected hearings promptly.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On December 4, 2020, Ubiqus Group, a contractor providing transcript services for the New York City Department of Education's teacher disciplinary hearings, experienced a ransomware attack that disrupted critical operations. The company publicly confirmed the cybersecurity incident, characterizing it as ransomware-related, and implemented precautionary measures by shutting down all IT systems across its global operating sites. This immediate containment action aimed to prevent further unauthorized access or data compromise. The attack directly impacted the NYC Department of Education's ability to conduct termination hearings for tenured educators accused of incompetence or misconduct, as these proceedings rely heavily on Ubiqus-generated transcripts. A DOE spokeswoman acknowledged awareness of the incident but declined to confirm whether attackers had issued a ransom demand, reflecting the ongoing investigative nature of the event.

The operational consequences were severe, with pending hearings halted indefinitely due to the unavailability of essential documentation. Betsy Combier, a paralegal involved in teacher defense cases and an early reporter of the incident, emphasized the transcripts' critical role, stating their absence prevented case resolutions, closing arguments, and final decisions. Combier contacted the New York State Education Department, which confirmed a forensic cyber team was actively investigating the breach. The NYC DOE clarified that Ubiqus operated under a state-level contract, necessitating coordination between city and state entities alongside the United Federation of Teachers (UFT) to reschedule affected hearings. DOE spokeswoman Sarah Casasnovas indicated efforts were underway to restart a limited number of hearings within the same week, though the broader system restoration timeline remained unspecified pending the forensic investigation's conclusions and Ubiqus's IT recovery progress.

Sources

Sources available to members: 1 source.