Skip to content
Jerome Schools Closed Due to Ransomware Attack on District Networks

Jerome Schools Closed Due to Ransomware Attack on District Networks

First seen 20 Oct 2026, 19:46 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 20, 2026 at 20:48 UTC
  • •Jerome schools closed for two days due to a ransomware attack.
  • •The attack compromised essential systems but most student data is believed safe.
  • •The district is working with cybersecurity experts and law enforcement for recovery.

Jerome schools in Idaho were closed on Monday and Tuesday following a ransomware attack that targeted district networks over the weekend. Superintendent Brent Johnson reported that the attack began with internal alerts and teacher communications on Saturday morning. The IT team is working to restore the network and assess the extent of compromised information, although Johnson believes most student data remains secure. The hackers gained control of essential internet-connected systems, prompting the closure to ensure safety. The district is collaborating with cybersecurity experts and law enforcement to investigate the incident. While Johnson expressed a desire to prosecute the attackers, he acknowledged the delicate situation regarding ransom demands. Staff devices are undergoing security checks before being reconnected. If systems are restored quickly, classes may resume on Tuesday.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-15
Cyber attack detected
Internal alerts and teacher reports indicated a cyber attack on district networks.
KIVI
2026-10-16
Schools closed
Jerome schools were closed on Monday and Tuesday to address the ransomware attack.
Kmvt

More articles in this cluster (2)

Following this threat?

Track Jerome School District in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Common questions

What systems were affected by the attack?
The attack targeted essential internet-connected systems, including cameras, door locks, and HVAC systems.
Is there a ransom demand?
The specific ransom demands from the attackers have not been disclosed by the school district.
When will schools reopen?
If systems can be restored quickly, classes may resume on Tuesday.