Cyber Incident Victim: Pierson High School
Date:
Nov 2019
Location:
United States of America
Summary
Pierson High School experienced a ransomware attack that disrupted its computer systems, compromising operational data including class schedules, academic reports, college acceptance records, payroll information, financial balances, and student grades. The district's superintendent initially anticipated restoration within approximately 24 hours using existing backups but systems remained non-operational a week later, requiring external professionals to assist in recovery efforts. No official public notification about the incident was published by the district or school despite the ongoing disruption.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On November 11, 2019, administrators and teachers at Sag Harbor’s Pierson High School discovered that hackers had seized control of the school’s computer systems through a ransomware attack. The breach immediately disrupted critical operational functions, including access to class schedules, academic reports, college acceptance records, payroll systems, financial bank balances, and student grades. Initial assessments by school officials revealed the attack compromised the entire computer infrastructure, creating uncertainty about the integrity and availability of institutional and student data. Superintendent Katy Graves acknowledged the incident publicly and indicated the district maintained backup systems to facilitate recovery. District leadership initially projected systems would be restored within approximately 24 hours, though they cautioned the outage might extend slightly longer. The attack occurred during the academic term, directly impacting administrative operations and instructional activities reliant on digital systems.
By November 18, 2019—one week after the initial detection—the computer systems remained non-operational according to a front desk clerk at the school district. Recovery efforts required engagement with external cybersecurity professionals to rebuild and restore systems from backup data. The extended outage demonstrated the attack’s severity exceeded initial district estimates, though no specific details regarding ransom demands, payment, or data exfiltration were disclosed in available reports. Public communication about the incident remained limited, with no official notices posted on either the Sag Harbor School District website or Pierson High School’s dedicated site as of the article’s publication date. The prolonged disruption affected multiple functional areas including academic record-keeping, financial operations, and administrative scheduling for an extended duration despite the district’s contingency measures.