New Plymouth School District #372
New Plymouth School District cybersecurity incident
Summary
New Plymouth School District #372 in Idaho stopped using its computers and network after detecting a cyber threat on Nov. 10, 2026. All three schools canceled classes, with a return planned for Nov. 16. The district had not confirmed when its systems would be restored.
Key facts
Timeline
-
Incident start:
?
Earliest known or assessed start of malicious activity or incident activity. -
First public signal:
?
Earliest public indication of an outage, disruption, closure or other observable incident impact. The signal does not need to mention cybersecurity. -
First public cyber evidence:
?
Earliest credible public information connecting the incident or disruption to malicious cyber activity. -
Last impact seen:
?
Latest public indication that disruption, degraded operations, recovery work or unresolved impact was still ongoing.
Primary victim organization
Impacted locations
Organization types
Critical infrastructure sector
DysruptionHub coverage
Incident characteristics
Assessments
Attack mechanisms
-
Unknown cyber mechanism
The incident is confirmed to be cyber-related, but the specific attack mechanism is unknown.
Data impacts
-
Unknown data impact
The incident is cyber-related, but available evidence does not establish whether or how data was affected.
Operational impacts
-
Educational operations disrupted
Instruction, student services, school administration, learning platforms, transportation, or other educational operations were materially affected.
-
Event or activity cancellation
Scheduled events, meetings, hearings, classes, procedures, programs, or other activities were canceled.
Extortion indicators
-
No known extortion indicator
Available evidence indicates that no extortion demand, threat, communication, or related pressure tactic was identified.
Incident narrative
New Plymouth School District #372 in Payette County, Idaho, stopped using its computers and district network after detecting a cyber threat on the morning of Nov. 10, 2026, Superintendent Wade Wilson said. The district asked families and staff to delete suspicious emails that appeared to come from schools or district employees while it worked to contain the threat and restore network functions.
The district canceled classes at its elementary, middle and high schools and planned to resume instruction Monday, Nov. 16, KTVB reported. The elementary school asked students to stay off their school accounts and learning platforms at home. The high school canceled its Nov. 12 Veterans Day assembly but said sports practices would continue.
The district enrolled 864 students in spring 2026, according to Idaho’s school report card.
The district had not confirmed when its systems would be restored. It had not identified how the threat entered the network or confirmed ransomware, an extortion demand, or access to student or staff data.
In a Nov. 11 update quoted by local news outlets, the district said it had seen no evidence of data compromise at that point. It shut down district Google accounts and computers at all schools as a precaution while it evaluated devices and worked to restore the network. The district said classes would resume as scheduled Nov. 16.
Organizations involved
Impacted locations
New Plymouth School District 372, Idaho
The attendance area of the district whose three schools canceled classes.
New Plymouth, Idaho
New Plymouth is the physical anchor for the district office and schools. The reported interruption was to instruction and school technology use.
Sources
DysruptionHub reported that New Plymouth canceled classes at all three schools after detecting a cyber threat. The district stopped using its computers and network. Classes were scheduled to resume Nov. 16. Idaho’s report card recorded 864 students enrolled in spring 2026.
Superintendent Wade Wilson said the district detected a cyber threat on Nov. 10 and stopped using its computers and network while responding. He also advised readers to delete suspicious emails that appeared to come from district or school accounts.
KTVB reported that New Plymouth School District canceled classes at all three schools after a cyber threat was detected in the district network. Classes were set to resume Nov. 16; families were asked to avoid district technology and school accounts, and the high school canceled its Veterans Day assembly while retaining sports practices.
See something that needs correction?
Signed-in members can report an error, update, or missing source.