Goshen Central School District hit by ransomware attack
- Organization
- Goshen Central School District
- Exploit
- Ransomware
- Industry
- Education
The Goshen Central School District in Orange County, New York, was struck by a ransomware attack on the afternoon of Wednesday 10 July 2024. The intrusion took down the district's computer services and left staff without access to district email accounts and phone systems.
Superintendent Kurtis Kotes notified families the following day. He said law enforcement had been informed and that cybersecurity specialists were working to identify the source of the attack and repair the affected systems as quickly as possible.
Because the district was in its summer recess, classroom instruction was not disrupted. Schools and district offices stayed open for in-person meetings and scheduled summer programs ran as planned, although families and staff had to reach the district in person while phones and email were down.
The district did not say at the time whether any student or staff data had been taken, and no ransom demand was disclosed publicly. No other school district in Orange County or the wider Hudson Valley reported a comparable attack in the same period. Recovery work was still under way when the district issued its update.
Updates
-
The Fog ransomware group listed the district on its leak site on 23 October 2024, claiming roughly 10 GB of exfiltrated data. The claim is the group's own and the district has not confirmed it.