Skip to content
Ransomware Attack Disrupts Oneonta City Schools

Ransomware Attack Disrupts Oneonta City Schools

First seen 23 Oct 2026, 17:14 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 23, 2026 at 18:15 UTC
  • •Oneonta City School District closed due to a ransomware attack discovered on October 22.
  • •Classes are canceled for two days, affecting approximately 1,700 students across five schools.
  • •Local, state, and federal authorities are investigating the incident.

A ransomware attack on Oneonta City School District in New York was discovered on October 22, 2026, leading to the cancellation of classes on October 23 and 26. Superintendent Thomas F. Brindley confirmed the incident in a letter to parents, stating that the full extent of the attack is still unknown. Local, state, and federal authorities are investigating the incident. The district has approximately 1,700 students and five schools. While classes are canceled, full-day BOCES students will continue their programs, and athletic events will proceed as scheduled. The district's technology team is working to contain unauthorized access and assess the impact of the attack. No information has been disclosed regarding whether a ransom was demanded or if any data was stolen.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-22
Ransomware attack discovered
Oneonta City School District identified a ransomware attack, prompting immediate action to contain unauthorized access.
Dysruptionhub
2026-10-23
Classes canceled
Schools closed for students and staff as the district assesses the impact of the ransomware attack.
Yahoo News
2026-10-26
Staff conference day
Staff will report to prepare for the return of students on October 27 following the ransomware attack.
Yahoo News

More articles in this cluster (2)

Following this threat?

Track Oneonta City School District in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Common questions

What is the current status of the investigation?
Local, state, and federal authorities are currently investigating the ransomware attack.
Will classes resume after the closure?
Classes are scheduled to resume on October 27, 2026, pending the assessment of the attack.
What measures are being taken to secure the district's systems?
The district's technology team is implementing protocols to contain unauthorized access and assess the impact of the attack.