Dallas Independent School District

Dallas Independent School District, also known as Lake Dallas Independent School District, is a public educational institution operating within the United States of America. Its primary function is the provision of K-12 education services to students residing within its designated geographic boundaries in Texas. As a school district, it manages multiple schools and employs staff dedicated to student instruction and administrative functions, serving the local community's educational needs.

The district has experienced significant cybersecurity incidents impacting vast amounts of sensitive personal data. In August 2021, unauthorized third parties gained access to its network, downloading personal information belonging to all students, employees, parents, and contractors associated with the district over a substantial historical period. This compromised data included Social Security numbers, names, addresses, phone numbers, dates of birth, medical conditions, custody statuses, employment records, and salary details. The attackers temporarily stored this information on an encrypted cloud storage site before its removal. Federal law enforcement assisted in the response, and the district addressed exploited vulnerabilities while implementing enhanced security measures. Affected individuals were offered credit monitoring and identity theft recovery services. Subsequently, in April 2023, the district suffered a ransomware attack claimed by the Royal group. This incident impacted 21,982 Texas residents, with exfiltrated data including names, addresses, Social Security numbers, driver's license details, various government IDs, financial account numbers, and medical and health insurance information. The attackers threatened to leak the data but did not provide subsequent proof of their claims.