Cyber Incident Victim: Salt Lake City School District
Date:
Oct 2015
Location:
United States of America
Summary
The Salt Lake City School District experienced a disruptive DDoS attack that disabled its website, phone systems, and online administrative tools, causing prolonged access limitations for teachers and parents. While operational access was significantly impaired, the district confirmed no compromise of student, employee, or parent data occurred during the incident. Internal IT security teams investigated the attack, though the motivation behind it remained unidentified at the time of reporting.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On Friday, October 30, 2015, the Salt Lake City School District experienced a distributed denial-of-service (DDoS) attack that disrupted critical operational systems. The attack incapacitated the district’s public website, rendered its phone system inoperable, and blocked access to online administrative tools used by staff. These disruptions immediately hindered communication channels and digital resources essential for daily school operations. District spokesman Jason Olson confirmed the cyberattack’s technical nature but emphasized no evidence of data exfiltration or compromise. Student records, employee information, and parent data remained secure throughout the incident. The attack’s primary impact centered on availability, denying legitimate users access to services rather than breaching confidentiality. By Monday morning, November 2, residual effects persisted, with teachers and parents reporting intermittent or limited functionality across affected systems.
The district’s IT security team initiated an investigation promptly after detecting the attack, though no attribution or motive had been identified by the time of public reporting. Olson stated the inquiry remained ongoing, with no conclusive findings regarding the perpetrators’ objectives or origins. Recovery efforts restored partial functionality over the weekend, but full service restoration extended into the following week. Operational challenges during the outage included hampered parent-teacher communications via phone and restricted access to digital administrative platforms. The district maintained transparency through direct statements to media outlets, ruling out data loss while acknowledging persistent access limitations. No secondary incidents or follow-up attacks were reported in the immediate aftermath.