Lake Oswego School District

The organisation operates as a public school district tasked with delivering K-12 education to students residing within its designated attendance area. It manages a network of schools, and the Moses Lake School District component specifically administers sixteen individual campuses that collectively serve the local community. These campuses provide a range of instructional programs, extracurricular opportunities, and support services intended to promote student learning, development, and readiness for future academic or vocational pursuits. Administrative functions for the district are conducted from its headquarters, which is situated in the United States, establishing the organisation’s domestic operational base. Funding for the district’s activities derives from public sources, including local tax revenues, state allocations, and federal assistance, consistent with the financing model for US public education. The overarching purpose of the organisation is to facilitate educational outcomes that align with state‑mandated curriculum standards and accountability measures.

The scale of the district’s technological footprint is illustrated by the Moses Lake School District’s possession of more than fifty servers and personal computers, a figure referenced in the description of a 2020 cyber incident. In July 2020, the Moses Lake School District fell victim to a ransomware attack that began with a phishing email sent from an IP address located in Moscow, Russia, resulting in the encryption of critical data and a demand for a one‑million‑dollar ransom that the district declined to pay. The attack compelled the district to suspend normal operations for more than two weeks, during which time it relied on backup systems to rebuild over fifty servers and PCs and gradually restore services. Prior to this event, in July 2018, the Lake Oswego School District experienced a separate security breach in which an employee’s email account was compromised and used to disseminate phishing links to roughly two hundred students, while the district’s official Twitter account was hijacked to post an unauthorized message about a change in ownership. Although the two incidents were not definitively linked, they collectively demonstrate the organisation’s exposure to cyber threats that target both internal communications and public‑facing social media channels. These experiences highlight the necessity for robust cybersecurity practices, employee training, and incident response planning within the K‑12 education sector, shaping the district’s ongoing efforts to safeguard its digital environment.