Jerome School District Refuses Ransom After Cyber Attack

The international crime organization that launched a ransomware attack on the Jerome School District on Oct. 17 demanded a payout that local officials quickly rejected as being way too much, GovTech reported.

Working alongside the FBI, district leadership decided against paying the extortionists. Superintendent Brent Johnson explained the district’s stance plainly.

“We just don’t have money coming out of our ears, much less to pay to criminals,” Johnson told the Times-News. “There’s also, philosophically, I don’t want to pay criminals at all.”

Johnson did not disclose the exact ransom amount requested by the hackers. He also declined to name the criminal organization responsible for the breach, stating he wanted to avoid giving the group any notoriety or fame for its illegal activities.

The cyber attack disrupted operations immediately when internal alarms sounded on Oct. 17 and teachers reported seeing ransom messages pop up on their computer screens. The district’s technical team contained the incident quickly to prevent the malware from spreading further across the network.

Classrooms Return to Traditional Methods

In response to the technological disruption, the district closed schools for two days. Classes resumed on Oct. 21 utilizing traditional, old-school learning methods while digital infrastructure remained offline for assessment.

The Jerome School District identified a cybersecurity incident affecting its network systems on Oct. 17. pic.twitter.com/JY89Iqa2Wo

— https://x.com/IdahoNews6/status/2112209605254123845

School-issued devices, including Chromebooks and tablets, were collected and thoroughly inspected by third-party cybersecurity experts before being returned to students and teachers. Staff members adapted to the offline environment by working from coffee shops, cars, and other temporary locations while systems underwent remediation.

Although core administrative and educational systems remained secure during the incident, an ongoing forensic investigation revealed that some data from local machines was compromised. Johnson communicated these developments to parents via email, noting that a lengthy review is still underway to determine the exact scope of any data loss.

Community Concerns and Recommendations

The breach has left parents anxious about the security of student records. Joshua Quirk, a parent of two children attending Frontier Elementary School, voiced his concerns to local reporters regarding the potential fallout.

“Hopefully our children’s information isn’t sold, and their credit isn’t damaged when they turn 18,” Quirk told the Times-News. “This is complete negligence …”

To help families mitigate potential risks, the district distributed an advisory on Wednesday recommending several protective measures. Parents were urged to place credit freezes with major bureaus including Equifax, Experian, and TransUnion. Additionally, the district advised families to connect school-issued devices exclusively to guest Wi-Fi networks at home and to bookmark official school portals rather than clicking on links found in unsolicited emails or text messages.

Cyber attacks targeting public education remain a widespread challenge. A 2025 study conducted by the Center for Internet Security found that 82 percent of K-12 schools experienced cyber threat impacts.

While the investigation continues, Johnson emphasized that the district has maintained proactive security measures and will comply fully with state and federal reporting requirements if any stolen data eventually appears on the dark web.