Skip to content
DysruptionHub
Sign in Subscribe

Intrusion causes brief Marietta City Schools network outage

Summary

Marietta City School District logo

Marietta City Schools acknowledged unauthorized access after an early December 2024 network outage. Systems recovered promptly; a later-reported RansomHub theft allegation remained unverified.

Key facts

Timeline

  • First public signal:
    ? Earliest public indication of an outage, disruption, closure or other observable incident impact. The signal does not need to mention cybersecurity.
  • First public cyber evidence:
    ? Earliest credible public information connecting the incident or disruption to malicious cyber activity.
  • Official cyber disclosure:
    ? First official acknowledgment by the affected organization or an authoritative public body that the incident was cyber-related.

Primary victim organization

Impacted location

Organization types

Critical infrastructure sector

Incident characteristics

Assessments

Cyber assessment:
Confirmed
Status:
Resolved
Incident confidence:
High
Ransomware:
Unresolved
Attribution:
Unresolved

Attack mechanisms

Data impacts

  • Unknown data impact

    The incident is cyber-related, but available evidence does not establish whether or how data was affected.

Operational impacts

  • Partial service outage

    A service, system, platform, or operational capability remained available only in part or with significant limitations.

  • Network outage

    Internal or external network connectivity was unavailable or materially impaired.

Extortion indicators

  • Ransom demand

    The victim received a demand for payment in exchange for restoring access, decrypting systems, preventing disclosure, or stopping another threatened action.

  • Leak-site listing

    The victim was listed on a threat actor or ransomware data-leak site as an alleged target or nonpaying victim.

  • Countdown or payment deadline

    The actor imposed a deadline or public countdown before increasing the demand, publishing data, deleting keys, or taking another threatened action.

Incident narrative

What happened

Marietta City Schools in Georgia acknowledged unauthorized access after a network outage in early December 2024. Superintendent Grant Rivera told WSB-TV on Dec. 4 that staff restored systems promptly and avoided significant operational disruption. Outside investigators assisted, and the district was adding continuous network monitoring.

Operational significance

The documented interruption affected network availability. The reviewed account does not identify particular applications, canceled classes or prolonged loss of instruction. It also gives no exact outage start or restoration day.

Confidence and uncertainty

The superintendent’s account establishes unauthorized access and an outage. Comparitech reported Dec. 5 that RansomHub had claimed responsibility, alleged theft of 500 GB and demanded payment within a week. The district had not verified that allegation. The report does not establish the stolen contents, encryption or payment.

Analytic gaps

The initial entry method, access period, affected data and responsible operator remain unresolved. The group’s alleged deadline does not establish how long district systems were unavailable, and an ongoing investigation does not establish continuing service disruption.

Ransomware.live recorded a listing for the district’s domain on Dec. 4, 2024. A later observation using the same domain with “www” does not establish a second incident. Neither observation supplies a verified original actor-post timestamp.

Threat actor and claim

RansomHub

Listed as: marietta-city.orgSource: ransomware.liveDiscovered:

Claim details

RansomHub claimed responsibility and alleged theft of 500 GB, demanding an undisclosed payment within a week, according to Comparitech’s Dec. 5, 2024, report. The district had not verified the allegation. Ransomware.live observed the district domain on Dec. 4 and its www alias on Dec. 21; these are duplicate observations of the same victim claim. The tracker observation is not a verified original actor-post timestamp. Neither the claim nor the outage proves encryption, exfiltration or payment.

Organizations involved

Impacted location

  • Marietta, Georgia

    Marietta contains the affected school system’s verified central office. This is a municipality-level physical anchor for the district network outage; it does not establish an outage of city government or every household.

    Source

Sources

Published Last updated

See something that needs correction?

Signed-in members can report an error, update, or missing source.