2026 Springfield Public Schools (MA) — cyberattack; FBI confirms student/staff data stolen
Data compromised
Student and staff information stolen (extent under investigation). Staff Social Security numbers possibly included (unconfirmed). District says student SSNs are not kept in the breached system. Former employees also in scope for credit monitoring.
Technical writeup
Verified Springfield Public Schools / city statements — September 2026. IT noticed malicious signals Sep 1; schools disrupted ~one week while systems were locked. On Sep 15 the FBI notified the district that student and staff data had been stolen by a cybercriminal organization (name withheld). Extent and leak location under investigation; staff SSNs may have been included (unconfirmed); district says student SSNs are not stored in the breached system. Free IDX credit monitoring for personnel and outreach to former employees. Mayor Domenic Sarno reaffirmed no ransom payment. recordsAffected 0 (no published headcount); companyConfirmed true.
Root cause
Cyberattack beginning ~Sep 1, 2026; systems locked; FBI later confirmed data theft of student and staff information