PHM updates parents, staff on ransomware attack

SOUTH BEND, Ind. -- Tuesday evening, the Penn-Harrison-Madison School District released an update on its response to a ransomware attack that disrupted classes on Monday. 

"We want to clarify that P-H-M does NOT collect, therefore does not retain, student social security numbers," said district director of communication Lucha Ramey. 

"The ransomware is Windows-based, which is why we referred to the attack as a network breach, and not a data breach. This means the malware was attempting to make its way through documents and files saved on P-H-M’s network drives and desktop computers. This is why Chromebooks were not affected. Only desktop computers and laptops connected to the network were impacted."

Full statement from PHM:

We are more than 24 hours into recovering from the ransomware attack on Monday, March 3. Things move pretty fast when a digital threat is identified. P-H-M Technology Department’s top priority yesterday, after responding quickly to decrease the spread, was to retain the expert resources of two cyber security firms. They immediately began assisting our Technology Team in identifying, locating, and containing the source of the ransomware infection. This work continued diligently overnight.

Today we are able to share what we know thus far:

The ransomware is Windows-based, which is why we referred to the attack as a network breach, and not a data breach. This means the malware was attempting to make its way through documents and files saved on P-H-M’s network drives and desktop computers. This is why Chromebooks were not affected. Only desktop computers and laptops connected to the network were impacted.

The majority of P-H-M teachers work within the Google cloud and therefore have been minimally impacted.

Skyward servers are ready to be restored once the all-clear has been given by our cyber security team.

WiFi and internet were impacted yesterday primarily due to intermittent disruptions as our Tech Team tracked down the cyber culprits. This has been resolved and connectivity should no longer be impacted. However, we are still limiting access to some external websites.

Some P-H-M websites may experience intermittent connectivity issues while we continue to work on server repairs.

Some media reports have alluded that student social security numbers could have been compromised; this is false. We want to clarify that P-H-M does NOT collect, therefore does not retain, student social security numbers.

This is the work the cyber security experts and P-H-M IT have begun:

Working on stabilizing and restoring services as quickly as possible.

Porting Canvas over to authenticate via Google.

Setting up extra servers to assist with drive space which will help with restoration of network files/documents.

Making sure Penn High School teachers have access to the technology they need to proctor the PSAT and SAT tests tomorrow, Wednesday, March 5.

IREAD testing began in some of our elementary schools today and we are pleased to report that they did not experience any problems due to this incident.

The collaboration with our cyber security team will continue for many more days and even a few weeks, as we work through the various stages of identification, containment, and elimination of the digital threat, as well as recovery and restoration of the potentially affected files. We will also be collecting evidence that we can eventually turn over to the proper law enforcement authorities.

We recognize that you have lots of questions. We assure you that as soon as we have more answers and information to share, we will do so.

While our Corporate Technology Staff is tirelessly working to resolve this issue, our Building Techs are busy supporting our teachers to make sure they have access to the tools they need to ensure a seamless educational experience for our students. It is a team effort to also provide support to our administrators and other departments to keep the district operating with as little disruption as possible. We thank them for their commitment.

Thank you for your patience as we work through this extensive process