Carlsbad Municipal Schools
Carlsbad Municipal Schools Cybersecurity Incident
Summary
Carlsbad Municipal Schools reported a network security event Oct. 31, 2025, after phone outages the previous day. Internet, email and ParentSquare access were disrupted, and restoration proceeded in phases into November.
Key facts
Timeline
-
Incident start:
?
Earliest known or assessed start of malicious activity or incident activity. -
First public signal:
?
Earliest public indication of an outage, disruption, closure or other observable incident impact. The signal does not need to mention cybersecurity. -
First public cyber evidence:
?
Earliest credible public information connecting the incident or disruption to malicious cyber activity. -
Last impact seen:
?
Latest public indication that disruption, degraded operations, recovery work or unresolved impact was still ongoing.
Primary victim organization
Impacted locations
Organization types
Critical infrastructure sector
DysruptionHub coverage
Incident characteristics
Assessments
Attack mechanisms
-
Unknown cyber mechanism
The incident is confirmed to be cyber-related, but the specific attack mechanism is unknown.
Data impacts
-
Unknown data impact
The incident is cyber-related, but available evidence does not establish whether or how data was affected.
Operational impacts
-
Network outage
Internal or external network connectivity was unavailable or materially impaired.
-
Internet access disruption
The organization lost or materially restricted internet connectivity.
-
Phone service disruption
Telephone, voice-over-IP, call-center, or related voice communication services were unavailable or materially impaired.
-
Educational operations disrupted
Instruction, student services, school administration, learning platforms, transportation, or other educational operations were materially affected.
Extortion indicators
-
Unknown extortion indicators
The incident may involve extortion, but available evidence does not establish which extortion indicators were present.
Incident narrative
Analyst assessment
Our Nov. 21 report reviewed district ParentSquare messages documenting an Oct. 31 network security event and phone outages that began Oct. 30. The district collected Windows devices for security checks and engaged in phased restoration. The victim’s own notice supports confirmed cyber involvement. The cause, attack method and any data impact have not been disclosed.
Operational significance
Campus phones, internet connectivity, email and ParentSquare were disrupted. On Nov. 6 the district said student Chromebooks were operating and internet service was being restored. Some families reported communication shifting to paper notes while recovery continued. Classes were not canceled in the available reporting. The district’s schools and offices listed on its official directory are in Carlsbad, while its school district boundary extends well beyond city limits in Eddy County.
Current status
The district had not published a complete restoration date in the reviewed material. The known disruption is months old, so status is presumed resolved rather than formally resolved.
Confidence and uncertainty
Confidence is high that a cyber event disrupted communications because the district itself called it a network security event and documented restoration activity. Initial access, precise attack mechanism, data exposure and extortion remain unknown.
Board follow-up
At a Nov. 14 special meeting, the school board listed district network security and operability and possible litigation options for discussion. The agenda does not identify an attacker or establish that litigation began.
Organizations involved
Impacted locations
Sources
Carlsbad Municipal Schools experienced a cyber incident that surfaced Oct. 30, disrupting phones and internet before phased restoration in early November, according to district posts and meeting records.
The district lists its schools and administration offices at Carlsbad, New Mexico, addresses.
See something that needs correction?
Signed-in members can report an error, update, or missing source.