Skip to content

Bartow County schools cyber incident disrupts internet access

Summary

Bartow County School System logo

Bartow County School System in Georgia lost internet, email and website access in October 2024 and reported an unauthorized access attempt. Fingerprinting for substitutes and volunteers was canceled while routine school activities continued. Chort’s later claim remains unverified.

Key facts

Timeline

  • First public signal:
    ? Earliest public indication of an outage, disruption, closure or other observable incident impact. The signal does not need to mention cybersecurity.
  • First public cyber evidence:
    ? Earliest credible public information connecting the incident or disruption to malicious cyber activity.
  • Official cyber disclosure:
    ? First official acknowledgment by the affected organization or an authoritative public body that the incident was cyber-related.
  • Last impact seen:
    ? Latest public indication that disruption, degraded operations, recovery work or unresolved impact was still ongoing.

Primary victim organization

Organization types

Critical infrastructure sector

Incident characteristics

Assessments

Attack mechanisms

  • Unknown cyber mechanism

    The incident is confirmed to be cyber-related, but the specific attack mechanism is unknown.

Data impacts

  • Unknown data impact

    The incident is cyber-related, but available evidence does not establish whether or how data was affected.

Operational impacts

  • Network outage

    Internal or external network connectivity was unavailable or materially impaired.

  • Internet access disruption

    The organization lost or materially restricted internet connectivity.

  • Email disruption

    Email sending, receiving, access, or related messaging functions were unavailable or materially impaired.

  • Website unavailable

    A public-facing website was unavailable, disabled, or inaccessible.

  • Educational operations disrupted

    Instruction, student services, school administration, learning platforms, transportation, or other educational operations were materially affected.

  • Event or activity cancellation

    Scheduled events, meetings, hearings, classes, procedures, programs, or other activities were canceled.

  • Staff unable to work normally

    Employees or contractors were unable to perform normal duties because systems, data, facilities, or communications were unavailable.

  • Customer or public access restricted

    Customers, residents, patients, students, vendors, or members of the public faced access restrictions or could not use services normally.

Extortion indicators

  • Leak-site listing

    The victim was listed on a threat actor or ransomware data-leak site as an alleged target or nonpaying victim.

  • Full data publication

    The actor published or released a substantial or complete set of allegedly stolen victim data.

Incident narrative

Analyst assessment

Bartow County School System in Georgia experienced a network outage in October 2024 that interrupted internet access, email and its websites. In an Oct. 18 statement reproduced by WBHF, the district said its investigation had identified an unauthorized outside attempt to access its information systems during the preceding weekend. It was working with outside specialists to investigate and restore services.

Operational significance

An original district notice dated Oct. 14 canceled fingerprinting for substitutes and volunteers at the central office the following day because of the network outage. This establishes a specific interruption to a district service beyond the loss of online communications.

The district continued teaching and other routine school activities. In Oct. 17 reporting, its communications coordinator said classes, meals, dismissal, buses and after-school activities were proceeding, and telephones remained operational. Internet and email access were still impaired. The Oct. 18 district statement described five days of disruption and said staff were adapting while restoration work continued.

Confidence and uncertainty

Confidence is high in the documented cyber incident and operational effects because the district itself described the attempted unauthorized access and resulting service disruption. Its statement left open whether information had been accessed or compromised. It did not establish encryption, an entry technique or responsibility for the attempt.

Comparitech reported a Chort claim in November. CYJAX’s Nov. 19 research described files offered for download under the district’s name but explicitly said it could not confirm that the district’s incident was connected to Chort. The tracker also lists the district’s domain. These sources establish a reported claim and alleged data release; they do not independently establish the files’ authenticity, data theft from this incident, ransomware deployment or Chort’s responsibility.

Analytic gaps

The district dated the attempted intrusion only to the weekend preceding its Oct. 18 statement. The precise attempt and outage-onset dates, affected systems beyond the reported services, any verified personal-data consequences, ransom demand or payment and recovery costs remain unresolved.

The incident is presumed resolved because of the elapsed time, but a complete restoration date has not been established from the reviewed evidence. Oct. 18 is the latest dated statement documenting ongoing restoration work in the available dated statements. The November claim and retrospective reports do not establish continuing operational disruption.

Threat actor and claim

Listed as: bartow.k12.ga.usSource: ransomware.liveDiscovered:

Claim details

Ransomware.live lists the district’s bartow.k12.ga.us domain under Chort and describes databases and files as published. The tracker recorded discovery Nov. 17, 2024; original posting and attack dates are unknown. Comparitech reported the claim Nov. 18. CYJAX’s Nov. 19 research observed files offered under Bartow’s name but could not confirm a connection to the district’s October incident. The district acknowledged an unauthorized access attempt and disruption, while successful data access, exfiltration, encryption and Chort responsibility remain unconfirmed. No verified ransom terms or data volume is established.

Organizations involved

Impacted locations

  • Adairsville, Georgia

    Adairsville Elementary School operates within Adairsville. It is part of the district whose network services were disrupted while routine school activities continued.

  • Bartow County School District, Georgia

    This is the affected school district’s service area. District statements describe a network outage and continuing restoration work in October 2024, while routine school activities continued.

  • Bartow County, Georgia

    The district’s central office at 65 Gilreath Road NW is in unincorporated Bartow County. Its Oct. 15 fingerprinting service for substitutes and volunteers was canceled because of the network outage.

  • Emerson, Georgia

    Emerson Elementary School and Red Top Middle School operate within Emerson. They are part of the district whose network services were disrupted while routine school activities continued.

  • Euharlee, Georgia

    Woodland Middle School at Euharlee and Euharlee Elementary School operate within Euharlee. They are part of the district whose network services were disrupted while routine school activities continued.

Sources

Bartow County, Georgia Schools Experience Cyber Incident Leading to Extended Internet Outage

The article reports an extended network outage affecting Bartow County schools’ internet access, email and websites. It describes the district’s acknowledgment of an unauthorized outside access attempt and continuing investigation and restoration work.

Bartow County Schools cancels Oct. 15 fingerprinting because of network outage

The district canceled fingerprinting for substitutes and volunteers at its central office on Oct. 15, 2024, because of a network outage. The notice documents a specific service interruption before the district publicly described the unauthorized access attempt.

Bartow Schools left without internet after districtwide outage

The district said internet access, email and websites were affected while telephones remained operational. Classes, meals, buses, dismissal and after-school activities continued despite the outage.

Bartow County School System Releases Statement Regarding Districtwide Internet Outage

WBHF reproduced the district’s statement describing five days of disruption and an unauthorized outside attempt to access its systems during the preceding weekend. The district said it was investigating possible information access and working to restore internet service.

New ransomware gang claims cyber attack on Bartow County School System and others

Comparitech reported that Chort listed Bartow County School System among its claimed victims in November 2024. It said the district had not confirmed ransomware or responded to the group’s claim.

The Devil and the Termite: data-leak sites emerge for Chort and Termite extortion groups

CYJAX observed files offered for download under Bartow County School System’s name on Chort’s leak site. Its researchers explicitly said they could not confirm a connection between the district’s incident and Chort’s claim.

Ransomware.live Chort listing for bartow.k12.ga.us

The tracker lists bartow.k12.ga.us as an alleged Chort victim and describes databases and files as published. The listing does not independently confirm the files’ authenticity or Chort’s responsibility for the district’s outage.

See something that needs correction?

Signed-in members can report an error, update, or missing source.