Memphis-Shelby County Schools (MSCS)

Memphis-Shelby County Schools (MSCS) faced a mass outage due to a security breach in their third-party messaging software, Finalsite. The breach caused the system to go offline, disrupting critical communication channels used for emails, reminders, and alerts to parents, faculty, and staff. While no data was compromised (as confirmed by Finalsite), the incident led to operational disruptions, forcing MSCS to switch to an alternative messaging system temporarily. The outage impacted the district’s ability to efficiently disseminate time-sensitive information, potentially affecting administrative workflows, parental engagement, and internal coordination. Although no financial, personal, or sensitive data was exposed, the service interruption posed reputational risks and highlighted vulnerabilities in third-party vendor security. The incident underscored the reliance on external platforms for essential functions and the cascading effects of cybersecurity failures on public institutions.

Source: https://www.actionnews5.com/2025/10/08/software-breach-causes-districtwide-messaging-outage-mscs-officials-say/

TPRM report: https://www.rankiteo.com/company/shelby-county-public-schools

"id": "she1492314100825",
"linkid": "shelby-county-public-schools",
"type": "Breach",
"date": "10/2025",
"severity": "25",
"impact": "1",
"explanation": "Attack without any consequences: Attack in which data is not compromised"

{'affected_entities': [{'customers_affected': 'Parents, faculty, and staff '
                                              '(communication disruption)',
                        'industry': 'Education',
                        'location': 'Memphis, Tennessee, USA',
                        'name': 'Memphis-Shelby County Schools (MSCS)',
                        'type': 'Public School District'},
                       {'customers_affected': 'MSCS (service outage)',
                        'industry': 'Education Technology',
                        'name': 'Finalsite',
                        'type': 'Software Provider'}],
 'customer_advisories': 'MSCS advised parents, faculty, and staff to use '
                        'alternative messaging system for updates.',
 'data_breach': {'number_of_records_exposed': '0 (per Finalsite)',
                 'type_of_data_compromised': 'None (per Finalsite)'},
 'date_publicly_disclosed': '2025-01-01',
 'description': 'Memphis-Shelby County Schools (MSCS) experienced a mass '
                'outage of their messaging software, Finalsite, following a '
                'security breach. While Finalsite reassured MSCS that none of '
                'its data was impacted, the breach caused the messaging system '
                'to go offline, disrupting communication services. MSCS '
                'switched to an alternative messaging system for emails and '
                'reminders to parents, faculty, and staff.',
 'impact': {'data_compromised': "None (per Finalsite's reassurance)",
            'downtime': 'Ongoing (as of report date)',
            'operational_impact': 'Disruption of communication services '
                                  '(emails, reminders to parents, faculty, and '
                                  'staff)',
            'systems_affected': ['Finalsite mass messaging software']},
 'investigation_status': 'Ongoing (per report)',
 'references': [{'date_accessed': '2025-01-01',
                 'source': 'WMC Action News 5',
                 'url': 'https://www.wmcactionnews5.com'}],
 'response': {'communication_strategy': 'Public disclosure via local news '
                                        '(WMC)',
              'remediation_measures': 'Switched to alternative messaging '
                                      'system for communications'},
 'title': 'Memphis-Shelby County Schools Mass Messaging Outage Due to '
          'Finalsite Data Breach',
 'type': 'Data Breach / Service Outage'}