A reported “cyber incident” left the Denmark School District in the Village of Denmark, Wisconsin, without internet access for five school days, forcing teachers and students to rely on paper-based workarounds, according to a local news report.
The Denmark News reported Feb. 9, 2026, that students and staff were “forced back in time” after service went down across district facilities. The outlet attributed the disruption to a “cyber incident,” but it did not identify a specific type of attack.
Independent of that reporting, the district’s network provider, WiscNet, posted a status incident showing the Denmark School District’s “handoff port” down starting Jan. 30, listing a seven-day duration and a root cause described as “internal.”
District officials have not publicly detailed what systems were affected, whether any data was accessed, or whether law enforcement or outside incident-response firms were involved.
Separately, ransomware tracking site ransomware.live listed the district’s domain, denmark.k12.wi.us, as a victim claimed by a group it labels “Incransom,” with a discovery date of March 1, 2026. The listing reflects a threat-actor claim and is not, by itself, confirmation of ransomware or data theft.
The district did not respond to an email seeking comment from DysruptionHub as of Monday.
Denmark School District serves about 1,500 students in pre-K through 12 in and around the Village of Denmark, spanning parts of Brown, Manitowoc and Kewaunee counties.
The outage echoes disruptions reported elsewhere in K-12 education. In California, Tulare City School District said it was investigating suspicious activity as an extortion claim circulated. In Texas, Eanes ISD faced an unverified ransomware claim after an outage. In Pennsylvania, Minersville Area schools took networks offline and canceled classes amid a ransomware-related disruption.
Absent further details from district officials, it remains unclear what caused the Denmark disruption and whether any student or staff information was exposed.