Skip to content
Slate Valley School District Declines Ransom Payment Amid Data Breach Threat

Slate Valley School District Declines Ransom Payment Amid Data Breach Threat

First seen 4 Oct 2026, 23:01 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 5, 2026 at 00:02 UTC

The Slate Valley Unified School District in Vermont experienced a ransomware attack in early September 2026, compromising personal information of over 1,500 teachers. The district's internet system was breached, leading to a demand for hundreds of thousands of dollars in ransom from the Kairos ransomware group. Superintendent Brooke Olsen-Farrell confirmed that the district's server was hacked, and the board voted on October 2 to decline the ransom payment. The hackers claimed to possess sensitive data, including Social Security numbers and addresses, threatening to leak it. The district is currently investigating the incident with assistance from the FBI and cybersecurity firms. As of October 2, the district has restored its internet services but has not confirmed whether any student data was compromised. The ongoing investigation aims to determine the extent of the breach and the identity of the attackers.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-09-03
Ransomware attack discovered
The Slate Valley Unified School District learned of the attack when teachers could not log in to systems.
Vtdigger
2026-09-29
Incident notice updated
The district reported ongoing challenges and confirmed the complexity of the investigation.
Databreaches
2026-10-02
School board votes against ransom payment
The board formally declined to authorize any ransom payment and authorized continued investigation efforts.
Databreaches

More articles in this cluster (2)

Following this threat?

Track Kairos Ransomware Group and Slate Valley Unified School District in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Common questions

What data was compromised?
The hackers claimed to have personal information of over 1,500 teachers, including Social Security numbers.
Is there an ongoing investigation?
Yes, the district is working with the FBI and cybersecurity firms to investigate the breach.
What steps should the district take now?
The district should continue its investigation, monitor for data leaks, and enhance cybersecurity measures.