Midlands School District Stands Firm Against Ransom Demand from Hackers

Midlands School District officials have opted not to pay a ransom demanded by foreign hackers following a significant cyber attack that disrupted their computer systems and compromised sensitive student data. Superintendent Akil Ross made this announcement during a virtual town hall meeting for parents on October 3, 2023, emphasizing the district’s commitment to protecting its integrity.

The breach, which occurred in June 2023, caused a series of operational challenges for the district, including the delay of high school summer classes in the Chapin and Irmo areas. Internet access in district facilities was disrupted for several days, and the payment of year-end bonuses for teachers and staff was also postponed.

During the town hall, Jack Jupin, a former FBI agent and cybersecurity expert, supported the decision not to pay the ransom, stating, “I tell my clients not to pay. Because if you pay, it just perpetuates the problem.” Jupin explained that paying hackers often leads to repeat attacks, as they might target the same organization again, hoping for further financial gain.

The exact amount of the ransom demanded by the hackers has not been disclosed. However, a press release from Lexington-Richland 5 earlier this month confirmed that personal information, including names, addresses, and Social Security numbers, was posted on an online forum frequented by cybercriminals. Jupin noted that the hackers, likely operating from locations such as China or Eastern Europe, were primarily motivated by financial gain rather than the data itself.

As part of their response to the breach, the district has announced plans to provide credit monitoring and identity theft protection services to individuals affected by the data exposure, as well as to all current district staff. Ross mentioned that, according to state law, this credit monitoring will last for 12 months, with possibilities for extension if instances of stolen information arise.

The district is currently sifting through over 1.03 terabytes of data, which amounts to approximately 1,200 jump drives of information, to identify the specific breaches. The costs associated with the credit monitoring services will be covered by the cybersecurity insurance held by the district.

Despite the unfortunate incident, Superintendent Ross highlighted that the district’s existing security measures had previously passed rigorous assessments, leading to a reduction in insurance co-pay from $100,000 to $25,000.

Law enforcement agencies at local, state, and federal levels are actively investigating the data breach. Ross expressed caution during the town hall when discussing the details, aiming to avoid compromising the ongoing investigation or exposing further vulnerabilities within the school district’s systems. The breach was traced back to a phishing email, which gained access to the district’s systems when an employee unwittingly opened an unsecured link.

As public concern grows regarding the security of personal information, community members have asked for advice on how to protect themselves. Jupin recommended contacting major credit bureaus such as Equifax, Experian, and TransUnion for heightened monitoring of any transactions that may involve their personal data. The district has also encouraged residents to submit additional questions as they navigate this complex situation.