Breaches and incidents

Oneonta City School District (New York): ransomware attack closes schools, group calling itself “Shiba ransomware” claims data theft

The Daily Star (Oneonta), republished by GovTech on 28 Oct 2026, reported “last week’s ransomware attack” on the district, which “canceled classes Friday...

Disclosed
Verification
Reported by a reputable outlet, citing the company

What happened

  • The Daily Star (Oneonta), republished by GovTech on 28 Oct 2026, reported “last week’s ransomware attack” on the district, which “canceled classes Friday and Monday in response to the attack” after deciding to “take critical life safety systems offline to support the investigative process.”
  • Root cause: not disclosed.
  • An anonymous email to the district named the group as “Shiba ransomware” and claimed it stole records on students, parents and staff, threatening publication in eight days; Superintendent Thomas Brindley said “we have been dealing directly with Shiba” but, asked whether evidence supports the theft claim, said “not specifically”.
  • The district retained a third-party cybersecurity firm to investigate; the exact date of the first district notice was not confirmed from a fetched page.