Eastern Hancock still investigating ransomware attack

0
566

CHARLOTTESVILLE — On its last day of the school year, the Eastern Hancock Community School Corporation is still dealing with the impact of a ransomware attack that shut down part of its internal computer network and prompted the cancellation of school on Tuesday, May 25.

Eastern Hancock superintendent Dave Pfaff said the school corporation did eventually receive a ransom note from the hackers behind the attack, though not one requesting a specific amount of money.

Ransomware is a type of malicious software that restricts access to files or systems, with attackers demanding money in exchange for restoring access. The attack typically originates from a user clicking on a seemingly benign link, ad, or email attachment. To prevent the issue from spreading, Eastern Hancock preemptively shut down its internet, phone and HVAC networks and cancelled school on Tuesday.

Pfaff said Eastern Hancock’s systems are mostly back up and running, but an outside technology specialist is still working on fully resolving the problem.

“Getting rid of 85% of it does no good,” he said.

Pfaff said no student or employee information was compromised and the corporation believes there is no permanent damage to its servers.

Eastern Hancock reported the problem to its school resource officer, and the Hancock County Sheriff’s Department is investigating the matter.

Detective Ted Munden said he is waiting for a report by the specialist hired by the school corporation before taking any further law enforcement action. Once the sheriff’s department receives that report, Munden said, he will follow up on the information and likely request the help of law enforcement agencies with more experience handling ransomware cases.