Haywood County Schools

Haywood County Schools, also known as Haywood School District, is a public school district located in the United States, specifically serving Haywood County in North Carolina. The organisation provides educational instruction and support services to students residing within the county. It operates under the authority of local government and is funded through a combination of local, state, and federal revenues. The district is governed by an elected board of education that sets policy and oversees operational decisions. As a governmental entity, it must comply with North Carolina state education laws and reporting obligations. In addition to traditional classroom‑based learning, the district has the capacity to deliver remote and hybrid instructional options when required.

In August 2020, the district was targeted by a ransomware attack conducted by the SunCrypt threat group, which resulted in the shutdown of its computer network and a temporary halt to remote learning activities. The attackers first extracted unencrypted data from the system before deploying encryption across devices using a PowerShell script that was propagated from the domain controller. This breach exposed personal information of staff and students, and because the district refused to meet the ransom demand, the threat actors subsequently released a 5 GB archive containing the stolen data. Forensic analysis confirmed the occurrence of the attack but was unable to establish the full extent of the data that had been exfiltrated. Even after remote instruction was restored, some systems remained partially impaired because the ransomware’s encryption could not be reversed without payment.