Kearney Public Schools

Kearney Public Schools experienced a cyberattack on Friday, disrupting critical network-dependent systems, including phones, computers, and digital tools. The attack rendered these services unavailable as of Monday, forcing in-person communication and halting digital operations. While the district confirmed the incident was not a ransomware attack and did not compromise safety systems (e.g., door locks, fire suppression) or sensitive data (student information, payroll, finance), the outage severely disrupted administrative and educational workflows. The superintendent expressed hope for system restoration by Tuesday but acknowledged significant operational inconvenience. The attack’s primary impact was system downtime, impairing instruction, communication, and administrative functions without evidence of data theft or financial harm. The district prioritized maintaining physical safety and restoring functionality, though the incident highlighted vulnerabilities in its cybersecurity infrastructure.

Source: https://nebraskapublicmedia.org/en/news/news-articles/kearney-school-district-hit-by-cyberattack/

TPRM report: https://www.rankiteo.com/company/kearney-public-schools

"id": "kea3792137102625",
"linkid": "kearney-public-schools",
"type": "Cyber Attack",
"date": "10/2025",
"severity": "60",
"impact": "2",
"explanation": "Attack limited on finance or reputation"

{'affected_entities': [{'customers_affected': 'Students, staff, and parents '
                                              '(indirectly via service '
                                              'disruption)',
                        'industry': 'K-12 Education',
                        'location': 'Kearney, Nebraska, USA',
                        'name': 'Kearney Public Schools',
                        'type': 'Educational Institution'}],
 'customer_advisories': 'Parents and staff advised to use in-person '
                        'communication; assured safety systems remain intact',
 'data_breach': {'data_exfiltration': 'No',
                 'file_types_exposed': 'None',
                 'number_of_records_exposed': '0',
                 'personally_identifiable_information': 'No',
                 'sensitivity_of_data': 'None',
                 'type_of_data_compromised': 'None'},
 'date_detected': '2023-10-27',
 'date_publicly_disclosed': '2023-10-29',
 'description': 'Kearney Public Schools experienced a cyberattack on Friday, '
                'disrupting network-dependent systems including phones, '
                'computers, and digital tools. The attack did not compromise '
                'safety systems (e.g., door locks, fire suppression), student '
                'information, payroll, or finance systems. The district aimed '
                'to restore functionality by Tuesday, with in-person '
                'operations continuing despite digital tool unavailability.',
 'impact': {'brand_reputation_impact': 'Potential reputational impact due to '
                                       'service disruption',
            'data_compromised': 'None (student info, payroll, finance systems '
                                'unaffected)',
            'downtime': 'At least 3 days (Friday to Tuesday expected recovery)',
            'identity_theft_risk': 'None (no PII compromised)',
            'operational_impact': 'Digital tools unavailable; in-person '
                                  'communication required; school remained in '
                                  'session with limited functionality',
            'payment_information_risk': 'None',
            'systems_affected': ['Phones',
                                 'Computers',
                                 'Network-dependent systems',
                                 'Digital tools']},
 'investigation_status': 'Ongoing (recovery phase)',
 'ransomware': {'ransom_demanded': 'No (explicitly stated not a ransomware '
                                   'attack)',
                'ransom_paid': 'No'},
 'references': [{'date_accessed': '2023-10-29',
                 'source': 'Kearney Public Schools Website'},
                {'date_accessed': '2023-10-29',
                 'source': 'Kearney Public Schools Facebook Page'}],
 'response': {'communication_strategy': 'Public notices via website and '
                                        'Facebook; direct in-person '
                                        'communication encouraged',
              'incident_response_plan_activated': 'Yes (implied by recovery '
                                                  'efforts)',
              'recovery_measures': 'Aiming to restore network functionality by '
                                   'Tuesday; in-person operations continued',
              'remediation_measures': 'System restoration in progress'},
 'stakeholder_advisories': 'Public updates via website and Facebook; in-person '
                           'communication for urgent matters',
 'title': 'Cyberattack on Kearney Public Schools',
 'type': 'Cyberattack (non-ransomware)'}