Cyber Incident Victim: Lee County High School
Date:
Aug 2020
Location:
United States of America
Summary
A hacker disrupted a virtual high school Spanish class in North Carolina by gaining unauthorized access to a Google Meet session, exposing approximately 20 tenth-grade students, parents, and a teacher to prolonged racist, violent, and pornographic content. The intrusion included displays of Nazi imagery, videos depicting African Americans being shot, KKK references alongside Donald Trump imagery, and audible racist slurs over roughly 30 minutes, prompting parents to intervene by shielding children from the screens. The school attributed the breach to an inadvertent approval of external access and initiated investigations with law enforcement and technology teams, while similar disruptions involving offensive language and harassment targeting students and educators occurred at two other district schools during virtual lessons.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On August 17, 2020, Lee County High School in Sanford, North Carolina, experienced a disruptive cyber incident during a virtual Spanish class conducted via Google Meet. The class, part of COVID-19 remote learning measures, was accessed by an unauthorized individual who displayed racist, violent, and pornographic content to approximately 20 tenth-grade students, their teacher, and observing parents. Attack materials included Nazi symbols, videos depicting African Americans being shot, and images associating Donald Trump with the Ku Klux Klan. The intrusion lasted approximately 30 minutes, during which the perpetrator recited racist slurs. Parent Shauna Roberts witnessed the incident alongside her daughter, noting that multiple parents intervened physically by moving children away from screens while attempting to assess the situation. The attacker exploited access gained through what school officials later characterized as an "inadvertent approval" of an external address request to join the virtual classroom.
The incident prompted immediate responses from both affected families and institutional stakeholders. Lee County High School confirmed a joint investigation by law enforcement and the district’s technology department, emphasizing a review of security protocols for virtual classrooms. Similar disruptions occurred within days at Oberlin Magnet Middle School and Millbrook Magnet High School in Raleigh, where unauthorized participants used offensive language targeting students and educators. The Lee County attack specifically impacted trust in remote learning systems, with parents expressing concern over children’s exposure to traumatic content during educational activities. School administrators publicly reaffirmed their commitment to securing online platforms but did not disclose specific technical or procedural changes under consideration. No attribution or motive for the intrusion was confirmed at the time of reporting.