APS cyberattack latest in a series targeting schools - Albuquerque Journal

APS cyberattack latest in a series targeting schools

Scott Elder. (AP Photo/Cedar Attanasio)

SANTA FE – When the superintendent of Albuquerque Public Schools announced earlier this week a cyberattack would lead to the cancellation of classes for around 75,000 students, he noted that the district’s technology department had been fending off attacks “for the last few weeks.”

Albuquerque is not alone, as five school districts in the state have suffered major cyberattacks in the past two years, including one district that’s still wrestling with a cyberattack that hit just after Christmas.

But it’s the first reporting a cyberattack that required cancellation of classes, all the more disruptive as schools try to keep in-person learning going during the pandemic.

“If it seems I’ve come into your homes a lot in the past couple of years to share difficult news, you’re right. And here I am again,” Superintendent Scott Elder said in a video address Thursday. “We find ourselves facing yet another challenge.”

The closures, on Thursday and Friday, affect approximately one in five New Mexico schoolchildren, in what is the country’s 35th largest school district by enrollment, according to 2019 data from the National Center for Education Statistics. The district was one of the last in the state to reopen last year as vaccines became available.

The small town of Truth or Consequences discovered a cyberattack on Dec. 28, and still hasn’t gained control of its computer systems.

“We’re not out of the woods yet,” said Mike Torres, the information technology director of the school system in Truth or Consequences.

The attack has not been previously reported. It came when students were on vacation, allowing time to make contingency plans before students returned. Torres says that while the attack “made computer systems unavailable,” disruption has been minimal.

That wasn’t the case in Albuquerque, where teachers discovered Wednesday morning that they were locked out of the student information database that tracks attendance, records emergency contacts for students and tracks which adults are allowed to pick up which students at the end of the school day.

In 2019, Las Cruces Public Schools also suffered an attack on their student information database, after a phishing attack lured one or more employees to click a malicious link in an email months before, recalls Matt Dawkins, that district’s information technology director.

After lurking and scoping out the district’s system, a hacker or hackers carried out a ransomware attack. Data on many school computers, starting with the student database, was locked up in an encryption. A ransom was demanded in exchange for the key.

“It’s kind of like when your house gets robbed, you know? That feeling of being violated,” said Dawkins, in an interview Thursday, as his school went under lockdown due to an unrelated police call a mile away.

The school didn’t pay the ransom, and eventually found a way to reset its data systems to the state they were in the day before the attack. But it required months of hands-on work, extra expenses for temporary Wi-Fi hot spots and some new computers. Insurance covered much of the cost of the attack.

In the past two years, at least four other New Mexico schools have been hit by costly cyberattacks, according Patrick Sandoval, interim director of the New Mexico Public School Insurance Authority, which insures all districts in New Mexico except for Albuquerque.

Targets across the U.S. in 2021 included universities, hospitals and a major fuel pipeline. Data on the number of attacks and their cost are difficult to track, but the FBI’s 2020 annual report on cyberattacks said around $4.1 billion in damages was reported by institutions across the country that year.

Dawkins added if Albuquerque faces a ransomware situation, which hasn’t been confirmed, it might face a more complex attack. Instead of holding information hostage, ransomware attacks now threaten to sell data to the highest bidder online. So the student data in Albuquerque might not just be locked up, Dawkins said, but at risk of being shared with identity thieves and other bad actors.

Albuquerque Public Schools hasn’t said if the cyberattack they face is a ransomware attack, only that their student information database was “compromised,” and that it’s working with law enforcement and contractors to limit the damage.

Whatever the cause, they face a similar problem as Las Cruces faced in the days following the attack.

The database used to track attendance and other students was out of commission. It also realized that laptops needed to be quarantined and taken out of service, forcing teachers to work offline.

“Immediately our instructional department pivoted with pen and paper, you know, kind of old-fashioned sort of teaching so our print shop was printing materials. Teachers were able to adapt very quickly,” Dawkins said.

Albuquerque Public School officials have not elaborated on the decision to close schools, and didn’t respond to requests Thursday about why a paper system was not possible.

The decision to continue classes in Las Cruces came at a cost. Dawkins said that it probably took longer to get the school’s thousands of computers wiped and reset while teachers and administrators were working normal hours, and they had to live without technology for weeks and weeks.

In January 2020, the district’s computers were running again and in good time, too – the pandemic forced teachers and students into remote learning just a few months later.


Albuquerque Journal and its reporters are committed to telling the stories of our community.

• Do you have a question you want someone to try to answer for you? Do you have a bright spot you want to share?
   We want to hear from you. Please email yourstory@abqjournal.com

Nativo Sponsored Content

taboola desktop

MORE ARTICLES LIKE THIS

1
Fire Rescue: Man died inside building he set ablaze
ABQnews Seeker
57-year-old Linton had been linked to ... 57-year-old Linton had been linked to several previous fires in Albuquerque
2
Salary hikes proposed for governor, top officials
ABQnews Seeker
Increases, meant to match other states, ... Increases, meant to match other states, could cost NM just over $400K per year
3
Ransomware attack on APS is now resolved
ABQnews Seeker
FBI advises school officials to not ... FBI advises school officials to not provide details of demands
4
Man accused of stealing van full of toys arrested ...
ABQnews Seeker
San Juan County DA's office seeks ... San Juan County DA's office seeks to revoke his probation from past conviction
5
Gallup librarian adds award to her catalog
ABQnews Seeker
Director is one of 10 winners ... Director is one of 10 winners of the I Love My Librarian Award
6
State, labs seek zero-carbon hydrogen economy
ABQnews Seeker
Agencies hope to 'reach net zero ... Agencies hope to 'reach net zero emissions by 2050'
7
Fire Rescue: Man died inside building he set ablaze
ABQnews Seeker
57-year-old Linton had been linked to ... 57-year-old Linton had been linked to several previous fires in Albuquerque
8
Be cool: light rain, snow possible for NM this ...
ABQnews Seeker
Travelers be wary of potential slick ... Travelers be wary of potential slick roads
9
1% of state residents test positive for COVID
ABQnews Seeker
More than 21,000 new cases have ... More than 21,000 new cases have been reported since Friday