Santa Fe ISD Cyber Event in Texas Disrupts Testing, Sparks Privacy Concerns

Santa Fe Independent School District in Santa Fe, Texas, experienced a cyber event over the weekend of April 19–20, 2025, causing widespread network outages that disrupted internet, phone services, and the visitor check-in system across all campuses. District officials confirmed the event via Facebook, stating the Technology Department had restored the check-in system by April 23, allowing campus visits to resume. Junior high and high school STAAR testing was rescheduled for April 24–25, while elementary testing was moved to the following week. Concerned parents expressed frustration over limited transparency and fears about potential exposure of sensitive student data, such as social security numbers and home addresses.

Although Santa Fe ISD assured families that sensitive information remains secure, anxiety among parents persists as full system restoration efforts continue. Cybersecurity experts note that early assurances often precede later revelations of data theft, as ransomware groups commonly exfiltrate information before deploying attacks. District officials engaged law enforcement and an external cybersecurity firm to assist in the investigation. The incident not only caused logistical disruptions like rescheduling Biology STAAR exams at Santa Fe High School but also highlights the vulnerability of smaller school districts to cyberattacks. Officials pledged to provide ongoing updates to the community as recovery work continues.

Santa Fe ISD's incident occurs amid a nationwide surge in cyberattacks targeting educational institutions. In recent weeks, Western New Mexico University suffered a severe ransomware attack by the Russian-linked Qilin group, while Fall River Public Schools in Massachusetts and Pelham School District in New Hampshire faced significant network disruptions. These cases, including a mysterious outage at Aztec Municipal Schools in New Mexico, emphasize a growing trend: cybercriminals are increasingly targeting both small and large educational organizations, often leading to class cancellations, testing delays, and concerns over data security.