Skip to content
Richmond Public Schools Ransomware Attack Disrupts Operations

Richmond Public Schools Ransomware Attack Disrupts Operations

First seen 22 Oct 2026, 17:46 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 22, 2026 at 18:44 UTC
  • •Richmond Public Schools faced a ransomware attack on October 21, 2026.
  • •Threatening messages on employee laptops demanded action within 72 hours.
  • •The district's internet access was taken offline as a precautionary measure.

Richmond Public Schools experienced a ransomware attack on October 21, 2026, that forced the district to take its internet access offline, impacting phone and email services. Employees reported receiving threatening messages on their laptops, demanding action within 72 hours to avoid permanent data loss. Superintendent Jason Kamras confirmed the incident and stated that the district is working with cybersecurity experts and law enforcement to assess the situation. While in-person classes continue, teachers face challenges in adjusting lessons without internet access. The district has not confirmed specific details about the data compromised or the attackers involved. This incident highlights the growing trend of ransomware targeting educational institutions.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-21
Ransomware attack detected
Richmond Public Schools experienced a cybersecurity incident, leading to the shutdown of internet access and disruption of services.
Govtech
2026-10-21
Threatening messages reported
Employees received messages on their laptops threatening data loss if demands were not met within 72 hours.
Govtech
2026-10-21
Internet access taken offline
Superintendent Kamras confirmed the decision to take internet access offline to prevent further issues.
Wtvr

More articles in this cluster (2)

Following this threat?

Track Richmond Public Schools in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (3)

1 / 3

Common questions

What data was compromised?
The district has not confirmed specific details about the data that may have been compromised.
Are students safe during this incident?
Yes, Superintendent Kamras stated that the safety of students and staff is not affected.
What should staff do during this disruption?
Staff should refrain from connecting personal devices to the school network and follow guidance from district officials.