Greenville County Schools has temporarily suspended Gmail access for every student and employee after phishing emails began circulating through the district's own email system. The move, confirmed by district officials, is a security precaution while information technology staff investigate what happened and work to safely restore access.
District officials say they do not yet know whether any students or employees fell for the phishing emails, according to WSPA 7News. Students and employees across the district reported receiving the suspicious messages, which were sent through Greenville County Schools' own system rather than an outside source. Per district officials, the district was not hacked by the phishing incident itself, but the scope of who may have clicked on the messages remains under review.
Tim Waller, a Greenville County Schools representative, said the district immediately responds to incidents like this one. School employees have shifted to Outlook accounts for communications during the disruption, while students retain access to Google Classroom, documents and files even with Gmail paused. The district says it will notify families when student Gmail accounts are reactivated.
A Disruption at Massive Scale
The suspension affects one of the largest school systems in the country. Greenville County Schools is the largest public school district in South Carolina and the 42nd largest in the nation, serving more than 77,000 students and employing roughly 11,000 staff members across more than 100 schools in the Upstate region, according to Greenville County Schools. A temporary email freeze at that scale ripples through classrooms and administrative offices alike, even though core instructional platforms remain online.
The incident lands amid a broader statewide push to shore up school cybersecurity. The South Carolina Department of Education maintains the SAFE K-12 Information Security Program, which addresses cybersecurity in K-12 schools statewide, per the South Carolina Department of Education. The program was developed in response to growing cyberattack threats and increasing security complexity.
Phishing Remains Schools' Top Threat
Federal guidance released just last month reinforces why districts treat phishing incidents so seriously. The Cybersecurity and Infrastructure Security Agency updated its K-12 Cybersecurity Foundations package in August, emphasizing credential protection, phishing defenses and rapid incident response planning for school districts. U.S. K-12 school districts suffer an average of five cyber incidents per week, according to national security data compiled by CISA and the U.S. Department of Education, which classify school systems as target-rich environments for cybercriminals.
According to the Cybersecurity and Infrastructure Security Agency, K-12 schools experience more than one cyber incident per school day on average. The Cybersecurity and Infrastructure Security Agency says schools and school districts publicly reported more than 1,300 cybersecurity incidents from 2018 through 2021.
That vulnerability is concentrated in email. A 2025 Consortium for School Networking survey found that 27% of K-12 edtech leaders rated email phishing as a high-risk security threat, according to Schoolday. That concern helps explain why Greenville County Schools opted to freeze Gmail entirely rather than address the problem account by account.
Legal Safeguards and Recent Precedent
South Carolina law adds another layer of context to discussions of how districts respond to security incidents. The state's Financial Identity Fraud and Identity Theft Protection Act is part of that broader legal landscape.
The issue also highlights broader cybersecurity concerns involving school vendors in South Carolina. The FBI's Internet Crime Complaint Center separately issued a May advisory about ShinyHunters attacking a learning management system.
Greenville's situation also echoes broader email-related scams involving schools.
In a separate incident in January 2025, Greenville Journal reported that Greenville County Schools said no district data was affected or compromised by the PowerSchool breach. South Carolina Department of Consumer Affairs security-breach notices list SC DJJ School District (3/13/2025) - 22,232.
As of September 9, 2026, Gmail remained suspended for all students and employees, while information technology personnel continued working to resolve the issue and safely restore access for students, with families expected to be notified once student accounts are reactivated.
