Skip to content

Llano School District in Texas reports cyber incident after internet and phone outages

People were directed to campus offices before the district acknowledged a cybersecurity incident; Qilin’s claim remains unverified.

Brick administration building with “Dennis R. Hill Administration Building, Llano ISD” above glass entrance doors, with steps and an access ramp.
The Dennis R. Hill Administration Building houses Llano Independent School District’s offices in Llano, Texas. (Llano ISD)

Internet and phone outages disrupted Llano Independent School District in Texas Sept. 29. People were told to contact schools in person, and the district acknowledged a cybersecurity incident the next day.

The incident affected the district’s IT network, Assistant Superintendent Ryan Turner said in a Sept. 30 follow-up notice. The district took certain computer systems offline to contain the problem and brought in outside specialists to investigate.

Screenshot of Ryan Turner’s Sept. 30 Facebook notice announcing a cybersecurity incident, computer-system shutdowns and an investigation at Llano Independent School District.
Llano Independent School District acknowledged a cybersecurity incident affecting its IT network in a Sept. 30 Facebook notice posted by Assistant Superintendent Ryan Turner. The district said it took some computer systems offline and engaged outside investigators. (Screenshot by DysruptionHub)

“If you need to contact us, you will need to physically go to the campus office,” Kristi Downey, secretary to the superintendent, wrote in the previous day’s outage notice.

Turner said the district was working to bring systems back online. “We are diligently working to restore normal operations as quickly and safely as possible,” he wrote.

Based in Llano in Central Texas, the district operates four campuses and enrolled about 2,000 students in the 2025-26 school year. The notices did not say whether classes were canceled or instruction was interrupted.

The district did not explain what caused the network disruption or establish when the cybersecurity incident began. Its notices did not specify which systems were taken offline or how the shutdown affected individual campuses.

The ransomware group Qilin listed the district as a victim, according to a ransomware.live entry recorded Oct. 18. The claim remains unverified; the district has not identified an attacker or confirmed ransomware or data theft.

Chip in once
If this reporting helped you, a one-time tip helps cover hosting, tools and future investigations.

Tip us

Support us monthly
A small monthly pledge keeps independent coverage and our reader tools online for everyone.

Become a Supporter

The district did not respond to DysruptionHub’s request for comment.

School phone disruptions have prompted similar contact workarounds elsewhere. Earlier in September, Alaska’s North Slope Borough School District gave families temporary cellphone numbers after a cyber incident while classes continued in person.

As of Oct. 23, DysruptionHub had not found a later district statement confirming full restoration. The duration of the internet and phone outages remains unclear.

Joseph Topping

Joseph Topping

Joseph Topping is the founder and editor of DysruptionHub, reporting on cyber incidents and technology failures that disrupt public services, organizations and daily life.

All articles

More in Education

See all

More from Joseph Topping

See all