Baltimore Students Told To Ditch Windows PCs After Ransomware Attack

Baltimore County Public Schools (BCPS) urged students and staff to stop using their school-issued Windows computers and only use Chromebooks and Google accounts following a ransomware attack that hit the district’s network last Wednesday.

The ransomware attack forced BCPS to shut down most of its network due to the large number of systems impacted during the incident.

The Baltimore County school district is in charge of all public schools in Baltimore County, Maryland, and it is the 25th largest U.S. school system.

Students urged to stay away from Windows PCs

“We now know that BCPS-issued Chromebooks were not impacted by the cyberattack,” an update on BCPS’ website says.

“You may now safely use: BCPS-issued Chromebooks and BCPS Google accounts for students and staff. Please do not use BCPS-issued Windows-based devices until further notice.”

Also Read: What is Pentest Report? Here’s A Walk-through

District-issued Chromebooks were likely not affected in the attack as they are powered by a read-only Gentoo Linux–based operating system and use a cloud-based file storage system that blocks such malware from encrypting their contents.

BCPS officials also said that district schools will remain closed until at least December 1st, with more information to be provided daily at 5 PM by the end of Tuesday.

“Due to the recent ransomware attack, Baltimore County Public Schools will be closed for students on Monday, November 30, and Tuesday, December 1,” the district said. “BCPS offices will be open and staff will receive additional information about Monday and Tuesday.”

Until then, BCPS’ offices will be open and staff will be provided with additional information as soon as available following an ongoing investigation.

Last week’s ransomware attack

The Baltimore County school district disclosed the ransomware attack on November 25th, with the district’s Chief of Staff, Mychael Dickerson, confirming that the public school district’s offices, website, email system, and grading system were all impacted.

After the ransomware attack that hit its systems, the district also had to suspend all virtual learning and shut down offices.

“Due to issues with our network, all Baltimore County Public Schools will be closed today, Wednesday, November 25, 2020,” Dickerson said at the time.

“Baltimore County Public Schools can now confirm we were the victim of a Ransomeware [sic] cyber attack,” he added.

Depending on the ransomware gang behind the attack, this incident could also lead to a data breach if employee and student info was also exfiltrated from the district’s systems.

Also Read: What Legislation Exists in Singapore Regarding Data Protection and Security

Over 20 ransomware gangs are known for stealing sensitive documents from their victims’ servers before encrypting their network systems.

This is the third ransomware attack in the last three years affecting a Baltimore organization after Baltimore City Hall had its servers encrypted in a RobbinHood ransomware attack in May 2019 and Baltimore city’s emergency call system was taken down in March 2018.