Citizen Portal
Sign In

Get Full Government Meeting Transcripts, Videos, & Alerts Forever!

Get email alerts on the Cybersecurity topic

No spam. Unsubscribe anytime.

Alamo Heights ISD says cyber incident contained; investigation ongoing

ALAMO HEIGHTS ISD · April 1, 2026
AI-Generated Content: All content on this page was generated by AI to highlight key points from the meeting. For complete details and context, we recommend watching the full video. so we can fix them.

Summary

District leaders told a parent-staff advisory committee that a cyber incident last week is contained, forensic work is under way with third-party vendors and insurers, and officials will share findings when the scope is known.

District leaders told an Alamo Heights ISD parent-staff advisory group that a cyber incident last week has been contained but remains under active investigation. The facilitator said staff and an outside firm are scanning servers, restoring systems cautiously and gathering information to determine what data, if any, were affected.

"We're contained and so we know we're safe now," one district speaker said, praising IT staff for working into the night. Administrators said the district's insurer is coordinating support, including forensic vendors and legal counsel, to guide the response.

Committee members asked about public transparency and whether the district will provide a start-to-finish recap to the community. Officials said the district will comply with notification requirements once it knows the scope of impacted data and emphasized that some security details are restricted to avoid aiding malicious actors.

Rumors about the attack circulated in the meeting; one attendee referenced claims it was an international actor and involved a multimillion-dollar loss. A district official responded, "No, I cannot speak to any of that," and said officials are not ready to confirm attribution or financial impact.

The district praised its IT team, led by Brian and supporting staff, for the initial containment that enabled limited internet restoration within roughly a day and a half. Administrators said they will file required after-action reports with state authorities and will "share as much as we need to when that's when we know more."