Springfield Public Schools closed all of its buildings Tuesday after a cyber incident disrupted a handful of essential school operations, forcing the second-largest school district in Massachusetts to send more than 23,000 students home for the day. Superintendent Dr. Sonia Dinnall notified families that the closure was driven by health and safety considerations while officials worked to contain the breach. After-school activities were canceled districtwide, and staff and students who use school-issued laptops were told to stay off district network systems until further notice.
According to Boston 25 News, Dinnall said the district is working to address the incident and restore systems, and that closing schools for the day would let administrators organize backup plans for non-essential technology tools, such as attendance reporting, while officials fully address the underlying problem. The outlet reported that the shutdown affects both essential and non-essential systems, though attendance tracking was specifically named as one of the non-essential tools officials are working around.
A District That Has Been Here Before
Tuesday's closure is not Springfield's first brush with a major network compromise. The district was completely shut down by a ransomware attack on October 8, 2020, an incident that canceled all in-person and remote learning for more than 25,000 students and 4,500 employees at the time, according to a report from BleepingComputer. That attack hit during a period when schools nationwide were already leaning heavily on remote-learning technology amid the COVID-19 pandemic.
More recently, Springfield families were notified on December 28, 2024, that the district's student data software provider, PowerSchool, had suffered a breach involving the unauthorized exportation of personal information. The district responded by offering free credit protection services to affected families. Together, the two prior incidents mean Tuesday's shutdown marks the second time in six years that a cyber incident has halted district operations.
Who's Leading the Response
Dinnall took office in July 2024 after a 4-3 vote by the Springfield School Committee in May of that year, becoming the first woman and first Black woman to lead the district, per WAMC. She previously served as principal at Springfield High School of Commerce and as an administrator in Hartford Public Schools. The district she now oversees adopted a $708,789,645 general fund operating budget for Fiscal Year 2027 in May 2026.
Exactly what triggered Tuesday's shutdown — whether ransomware, unauthorized network access, or a vendor-side compromise — has not been specified. It also remains unclear whether any threat actor has demanded a ransom or whether sensitive student or employee records were accessed, and how long the district's backup administrative protocols will need to stay in place.
Questions About State Law
The incident also raises questions about data security and breach reporting under Massachusetts law.
Cybersecurity Risks Beyond Springfield
Springfield's shutdown highlights the cybersecurity risks facing public institutions.
Nationally, cybersecurity remains a concern for K-12 schools.
K-12 cybersecurity remains a subject of federal policy discussion. For Springfield, the immediate priority remains getting essential systems back online and school buildings reopened once officials determine it is safe to do so.
