LockBit3.0, a notorious cybercriminal group, has claimed responsibility for a cyberattack on Hillsborough County Public Schools in Florida. According to their statement, they have managed to acquire a substantial 2 terabytes of data from the school district.
While some sample files released by LockBit3.0 seem to contain routine district documents, one of them did contain personal and medically related information concerning students. However, the extent of potential data compromise, including any student databases with sensitive information, remains unclear.
Furthermore, LockBit3.0 has issued a threatening ultimatum, alleging that the school district is indifferent to the security of its 270,000 students and 17,000 teachers. They have given the district 10 days to comply with their demands, warning that if their conditions are not met, they will release all the stolen data to the public.
Additionally, this alarming development has raised significant concerns about the security of student and teacher data within the school district. The FBI is actively investigating the incident, which initially came to the attention of the school community in late August, although an earlier statement from the district suggested no evidence of student data compromise at that time.