Fessenden-Bowdon Public School District 25
Fessenden-Bowdon School email cyber incident
Summary
Fessenden-Bowdon School reported a cybersecurity incident affecting its Google domain Dec. 15, 2025. Staff email was unreliable, some information appeared deleted and families were warned that phishing messages might come from school accounts. Administrators directed families to call the school while working with Google to secure the domain.
Key facts
Timeline
-
Incident start:
?
Earliest known or assessed start of malicious activity or incident activity. -
First public signal:
?
Earliest public indication of an outage, disruption, closure or other observable incident impact. The signal does not need to mention cybersecurity. -
First public cyber evidence:
?
Earliest credible public information connecting the incident or disruption to malicious cyber activity. -
Last impact seen:
?
Latest public indication that disruption, degraded operations, recovery work or unresolved impact was still ongoing.
Primary victim organization
Organization types
Critical infrastructure sector
DysruptionHub coverage
Incident characteristics
Assessments
Attack mechanisms
-
Unknown cyber mechanism
The incident is confirmed to be cyber-related, but the specific attack mechanism is unknown.
Data impacts
-
Unknown data impact
The incident is cyber-related, but available evidence does not establish whether or how data was affected.
Operational impacts
-
Email disruption
Email sending, receiving, access, or related messaging functions were unavailable or materially impaired.
-
Educational operations disrupted
Instruction, student services, school administration, learning platforms, transportation, or other educational operations were materially affected.
Extortion indicators
-
Unknown extortion indicators
The incident may involve extortion, but available evidence does not establish which extortion indicators were present.
Incident narrative
Analyst assessment
DysruptionHub assesses with high confidence that Fessenden-Bowdon Public School District 25 experienced a cyber incident and material communications disruption in December 2025. Our Dec. 15 report documented the school’s notices that its Google domain was affected, email was unreliable, and families should call staff rather than relying on email. A school Facebook notice warned of possible phishing from school accounts and apparent deleted information.
Operational significance
The email outage impaired routine school-family communication and forced telephone contact. The school worked with Google to secure its domain and retain documents. The record does not establish canceled classes, permanent document loss or financial fraud.
Current status
The initial notices did not provide a restoration date. The school’s current live feed uses email and phone, but no reviewed source establishes when the incident was fully remediated. This retrospective record is presumed resolved without a confirmed all-clear.
Confidence and uncertainty
The school’s own characterization confirms a cybersecurity incident, while mechanism and account-takeover details are not specified. The warning about phishing was precautionary and does not establish that fraudulent messages were actually sent. Some information appeared deleted, but permanent loss and data theft are unconfirmed.
Analytic gaps
Initial access, exact affected accounts and files, final data outcome, actor identity and restoration date remain unresolved.
Organizations involved
Impacted locations
Sources
We reported the school’s Dec. 15 cybersecurity notice, unreliable email, apparent document deletion, and warning that phishing may arrive from school accounts.
The school said a cybersecurity incident affected its Google domain, that email was unreliable and information appeared deleted, and warned families about possible phishing from school accounts.
See something that needs correction?
Signed-in members can report an error, update, or missing source.