Kmvt Jerome Schools Closed Due to Ransomware Attack on District Networks
Article Content
- •Jerome schools closed for two days due to a ransomware attack.
- •The attack compromised essential systems but most student data is believed safe.
- •The district is working with cybersecurity experts and law enforcement for recovery.
Jerome schools in Idaho were closed on Monday and Tuesday following a ransomware attack that targeted district networks over the weekend. Superintendent Brent Johnson reported that the attack began with internal alerts and teacher communications on Saturday morning. The IT team is working to restore the network and assess the extent of compromised information, although Johnson believes most student data remains secure. The hackers gained control of essential internet-connected systems, prompting the closure to ensure safety. The district is collaborating with cybersecurity experts and law enforcement to investigate the incident. While Johnson expressed a desire to prosecute the attackers, he acknowledged the delicate situation regarding ransom demands. Staff devices are undergoing security checks before being reconnected. If systems are restored quickly, classes may resume on Tuesday.
Ask AI about this cluster
Answers cite the sources they use
More articles in this cluster (2)
Following this threat?
Track Jerome School District in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What systems were affected by the attack?
Is there a ransom demand?
When will schools reopen?
Continue Reading
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…
Silent Lynx Targets CIS Governments via WinRAR Exploit The threat actor Silent Lynx has launched a series of attacks against government organizations in the Commonwealth of Independent States (CIS) from June 2025 to August 2026. These attacks exploit a vulnerability in WinRAR (CVE-2025-8088) to deploy reverse shells, including FoalShell and PickleShell, facilitating…