Buffalo, N.Y. (WBEN) - There will be no instruction, remote or in person, for Buffalo Public Schools Monday as the district continues to investigate and work through the impacts resulting from a ransomware attack on the districts computer infrastructure Friday.
School based staff is being asked to report Monday and will be used to assist in the recovery efforts.
Superintendent Kriner Cash issued the following update late Sunday:
"What happened?
The Buffalo Public Schools experienced a cybersecurity outage on the morning of March 12, 2021. Our Information Technology staff responded and began to bring systems offline as an urgent precautionary measure.
Scope of the Incident
We are actively working with cybersecurity experts, as well as local, state,and federal law enforcement to fully investigate this criminal cybersecurity attack. Although the investigation into this security incident is ongoing, our comprehensive investigative team has identified key findings related to its root cause and potential overall impact to BPS systems. Meanwhile, IT will continue to provide staff with training and information to safeguard against cybersecurity threats to personally identifiable information.
Timeline to Recovery
Full recovery after a cybersecurity attack on an organization, is a multi-phased process. The district is making headway in restoring critical systems that support the primary function of teaching and learning. We have also prioritized the recovery of any affected business operation systems. The district will implement a longer term comprehensive initiative to enhance IT security and infrastructure going forward.
Status of Personally Identifiable Information (PII)
At this point, our lead investigative consultant and the FBI have not determined that there has been an exposure of PII. The investigation, which is both system forensic and criminal, is in its preliminary stages and will continue round the clock for at least two more weeks.
Monday, March 15
On Monday, March 15th, all district and school based staff will report to their respective sites. Students will remain at home and will not receive in person or remote instruction. The district will use tomorrow to pressure test system restoration and access as well as communicate any new or required information for students to access virtual learning tools once instruction resumes. Principals will be given instructions from IT regarding specifics on how school staff will assist with these recovery efforts.
Additional information and updates will be provided through all normal communication channels as we continue to investigate and resolve this serious matter."
On Friday, the FBI, which is assisting in the investigation, found out that ransom may be between $100,000-300,000 and could be negotiable. The district adds the primary goal of the team is the recovery of critical systems for the continuity of teaching and learning.
Cash approved an emergency contract with Grey Castle for cyber security investigation. The district's Chief Financial Officer, General Counsel, and Director of Purchase were notified and agreed to the execution of the emergency agreement.
"This is a criminal action, and we're going to pursue this to the fullest extent of the law," said Cash.
Friday, Buffalo School Board President Sharon Belton-Cottman reassured parents that school officials are doing everything in their power to address this situation in timely manner.
"It is unfortunate that we find ourselves, in this place and time, where our school district has been attacked by criminals and that we are subject to their demands," she said. "I want our parents, our students, our community to know that Buffalo Public Schools have been under attack before, and we came back. Guess what? We're still Buffalo strong; we're going to get through this, and we're going to make sure that it doesn't happen again."
The district is scheduled to bring more students back in to buildings as part of a phased return to in-person learning. Most of the district's 30,000 students have been learning remotely since the coronavirus shut down buildings last March.
