Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Cybersecurity topic
No spam. Unsubscribe anytime.
Lexington-Richland 5 says network attack detected June 3; investigation ongoing
Summary
Superintendent Dr. Ross told the board the district detected unusual network activity on June 3, 2025, and is working with law enforcement and third-party specialists; district says no evidence yet of significant data misuse and payroll was processed on schedule.
Dr. Ross, superintendent of Lexington-Richland School District Five, told the board the district detected “unusual network activity” on 06/03/2025 and immediately moved to secure systems and call in law enforcement and outside specialists.
The superintendent said the district has “deployed advanced detection and threat software” and is pursuing a full forensic investigation. “At this time, we do not have significant evidence of a data breach,” Dr. Ross said, adding that the district is following expert advice about what information to disclose so as not to aid threat actors.
The district’s technology, finance, human resources and academics teams operated on a secure network during the incident, and Dr. Ross said the June 15 payroll was completed and will be paid on time. He also thanked staff who worked through the outage and said teams have been on campus continuously since the incident.
Why this matters: the district’s statement frames the problem as an ongoing cybersecurity incident affecting operations. The board was told the investigation is active and that the district is balancing public information needs with not revealing defensive details that could help attackers.
Details reported to the board
- Date detected: 06/03/2025 (Dr. Ross read the date into the record). - Immediate actions taken: network lockdown steps, engagement of law enforcement and third‑party forensic specialists, deployment of advanced detection software. - Current assessment: “We do not have significant evidence of a data breach” and “no reason to believe sensitive data is being misused,” per Dr. Ross. - Operational impact: payroll and critical operations (summer school, SAT testing) continued on secured systems.
What the board heard and asked
Board members were told the district is categorizing information into “need to know” and “like to know” to avoid revealing defensive posture to attackers. Dr. Ross said threat actors are observing reporting, so the district is limiting some technical details while promising to keep the board and community informed as the forensic work proceeds.
Next steps
Dr. Ross said the district will provide updates as the forensic and legal reviews progress and will follow expert recommendations if any sensitive data is confirmed impacted.
Ending
The board did not take an action vote tied to the investigation at the meeting; the superintendent concluded his report by emphasizing staff efforts to maintain essential operations while the incident is resolved.
