The Clark County School District (CCSD) in Las Vegas reopened for in-person learning on August 24. It was attacked by hackers three days later in an incident first reported by the Wall Street Journal.
On the morning of August 27, according to the statement, certain computer systems from CCSD became infected with a virus that prohibited access to certain files. The Wall Street Journal reports that hackers published documents containing Social Security numbers, student grades and other private information from CCSD students and staff after officials refused to pay a ransom in return for unlocking district computer servers.
According to CCSD, the school district currently serves more than 320,000 students in Clark County, Nevada.
CCSD did not specify whether confidential information had been published but did acknowledge “that certain current and former employee information may have been accessed or acquired by the unauthorized actor.”
The district said it has “not received any reports of actual or attempted misuse of the impacted information” and is providing a notice to students and staff out of an abundance of caution.
The school district immediately informed law enforcement which involved third-party forensic investigators to look into the incident, according to the statement. Investigators concluded that CCSD was a victim of a criminal ransomware attack.
The school district is working to restore all systems to secure full functionality, according to the statement.
CCSD is not the only district to become the victim of a cyberattack in the new year.
Hartford Public Schools in Connecticut postponed in-person classes and online learning at the start of the school year, citing a ransomware virus that caused an outage of systems in the network infrastructure.
And the Miami-Dade school district saw dozens of attacks in the early days of the academic year.
The teen’s computer and gaming system were taking into evidence, Miami-Dade Schools Police Chief Edwin Lopez said, adding it’s unclear if the student was working alone.
Officials say they believe there are other attackers. Some of the IP addresses involved in the attacks have been traced back to Russia, Ukraine, China and Iraq, Superintendent Alberto Carvalho said. It’s unclear if there are attackers physically in those countries, but school officials said they’re working with international authorities in their investigations.
CNN’s Christina Maxouris and Artemis Moshtaghian contributed to this report.