麻豆精品

Get stories like this delivered straight to your inbox. Sign up for 麻豆精品 Newsletter

Kept in the Dark is an in-depth investigation into more than 300 K-12 school cyberattacks over the last five years, revealing the forces that leave students, families and district staff unaware that their sensitive data was exposed. Use the search feature below to learn how cybercrimes 鈥� and subsequent data breaches 鈥� have played out in your own community. Here鈥檚 what we uncovered about a massive ransomware attack on the Providence, Rhode Island school district.

After the Providence, Rhode Island, school district fell victim to a September 2024 cyberattack by the Medusa ransomware gang, school officials said an ongoing investigation found 鈥渘o evidence that any personal information for students has been impacted.鈥� 

An investigation by 麻豆精品, including a review of stolen files captured in the 217-gigabyte leak, indicates otherwise. Sexual misconduct allegations involving both students and teachers, children鈥檚 special education records and their vaccine histories were posted online after Providence Public Schools did not pay the cybercriminals鈥� $1 million ransom demand. 

The district鈥檚 failure to acknowledge that students鈥� records had been exposed 鈥� even after being informed otherwise by 麻豆精品 鈥� means that parents and students were likely unaware that their private affairs had entered the public domain. 

In October 2024, Providence schools notified 12,000 current and former employees that their personal information, such as their names, addresses and Social Security numbers, had been compromised. But the letter never makes mention of students鈥� sensitive records. 

In response to 麻豆精品鈥檚 findings in mid-October 2024, a district spokesperson didn鈥檛 acknowledge that students鈥� sensitive information was compromised. He said the district 鈥渉as been able to confirm that some [of its] files鈥� were accessed by an 鈥渦nauthorized, third party,鈥� and that 鈥渟ecurity consultants are going through a comprehensive review鈥� to determine whether the leaked files contain personal information 鈥渇or individuals beyond current and former staff members.鈥� 

Meanwhile, in an unsolicited phone call to 麻豆精品, a state education department spokesperson appeared to contradict that, saying 鈥渘o one had actually gone in to see the files.鈥� 

Included in the leak is the 2024-25 Individualized Education Program for a 4-year-old boy who pre-K educators observed had 鈥渟ignificant difficulty sustaining attention to task鈥� and who 鈥渨andered around the classroom setting without purpose.鈥� Another special education plan notes a 3-year-old boy 鈥渞andomly roamed the room humming the tune to 鈥榃heels on the Bus,鈥� pushed chairs and threw objects.鈥� 

A single spreadsheet lists the names of some 20,000 students and their demographic information, including disability status, home addresses, contact information and parents鈥� names. Another contains information about their race and the languages spoken at home.

A 鈥渢ermination list鈥� included in the breach notes the names of more than 600 district employees who were let go between 2002 and 2024, including an art teacher who 鈥渞etired in lieu鈥� of being fired and a middle school English teacher who 鈥渞esigned per agreement.鈥� Another set of documents reveals a fifth-grade teacher鈥檚 request 鈥� and denial 鈥� for workplace accommodations for obsessive compulsive disorder, anxiety and panic attacks that make her 鈥渓ess effective as an educator if I am not supported with the accommodations because I can not sleep at night.鈥� 

In one leaked April 2024 email, a senior central office administrator sought a concealed handgun permit from the state attorney general, noting they 鈥渉ave a safe at work as well as one at home.鈥�

Following an investigation published by 麻豆精品 and in October, the district to families acknowledging that students鈥� personal information, such as vaccine records and special education details, were exposed in the attack.

In response to an inquiry from 麻豆精品, a district spokesperson said in a November statement that educators remain 鈥渃ommitted to transparency and the security of personal information.鈥�

鈥淒uring these types of incidents, districts typically start with limited information on what occurred and then gain more information over the course of the investigation,鈥� the statement continues. 鈥淎s we navigated the initial uncertainty of the situation, PPSD prioritized taking real-time action and communicating with all stakeholders as we gathered more information.鈥�

Get stories like these delivered straight to your inbox. Sign up for 麻豆精品 Newsletter