/
Navigation
Chronicles
Browse all articles
Explore
Semantic exploration
Research
Entity momentum
Nexus
Correlations & relationships
Story Arc
Topic evolution
Drift Map
Semantic trajectory animation
Posts
Analysis & commentary
Pulse API
Tech news intelligence API
Browse
Entities
Companies, people, products, technologies
Domains
Browse by publication source
Handles
Browse by social media handle
Detection
Concept Search
Semantic similarity search
High Impact Stories
Top coverage by position
Sentiment Analysis
Positive/negative coverage
Anomaly Detection
Unusual coverage patterns
Analysis
Rivalry Report
Compare two entities head-to-head
Semantic Pivots
Narrative discontinuities
Crisis Response
Event recovery patterns
Connected
Search: /
Command: ⌘K
Embeddings: large
TEXXR

Chronicles

The story behind the story

days · browse · Enter similar · o open

The Vice Society ransomware gang publishes data allegedly stolen from the Los Angeles Unified School District, after the school system did not pay the ransom

Lawrence Abrams / BleepingComputer :

BleepingComputer Lawrence Abrams

Context & Ripple Effects

Los Angeles Unified had already reported that the ransomware attack disrupted operations; the alleged publication turns that operational incident into a potential data-exposure event. The prior report of the district-wide disruption established the immediate impact, while the district's refusal to pay defines the gang's escalation.

The episode follows an established school-sector pattern: after Las Vegas-area officials refused a ransom, attackers published student information. Related coverage also documents ransomware attacks across dozens of U.S. school districts since the pandemic began.

First-order effects

  • Los Angeles Unified must respond to the alleged release alongside restoring disrupted operations, while Vice Society uses publication to impose consequences after the district declined payment.

Second-order effects

  • Other school districts facing ransomware demands have a concrete example that nonpayment can be followed by public release, raising the importance of planning for both service disruption and data exposure.

Third-order effects

  • Repeated attacks on school systems and publication after rejected demands point to ransomware increasingly functioning as a dual-pressure model—operational disruption plus alleged data disclosure—rather than a recovery-only extortion event.

The trend: Ransomware campaigns against school districts are shifting from disruption alone toward extortion strategies that pair encrypted operations with threatened or actual data publication.

Discussion

  • @lausdsup Alberto M. Carvalho on x
    Thank you to our students, families and employees for doing their part in the ongoing recovery from this cyberattack. https://twitter.com/...
  • @lausdsup Alberto M. Carvalho on x
    I understand there will be many opinions on this matter but, simply said, negotiating with cybercriminals attempting to extort education dollars from our kids, teachers, and staff will never be a justifiable option. LAUSD refuses to pay ransom. @LASchools https://www.latimes.com/…
  • @brettcallow Brett Callow on x
    Vice Society has listed the 2nd largest school district in the US: #LAUSD. The same gang has hit at least 8 other US school districts and colleges/universities so far this year. 1/5 https://twitter.com/...
  • @lorenzofb Lorenzo Franceschi-Bicchierai on x
    NEW: Hackers affiliated with Vice Society ransomware group have started leaking sensitive internal data stolen from the Los Angeles Unified School District over the weekend. This comes after district leadership announced its decision not to pay ransom. https://www.vice.com/...
  • @margimurphy Margi Murphy on x
    LA Unified School District going live to discuss the Vice Society hack and leak which resulted in the release of student and staff data onto the web https://www.facebook.com/... I asked Vice Society why they were targeting schools
  • @lorenzofb Lorenzo Franceschi-Bicchierai on x
    Something I didn't expect to encounter in this project: several schools refused to release any emails because they said they were all sent a law firm too and thus were all covered by client-attorney privileged. https://www.vice.com/... https://twitter.com/...
  • @lorenzofb Lorenzo Franceschi-Bicchierai on x
    NEW: We filed FOIAs with more than 50 U.S. schools and school districts to find out how they dealt with ransomware attacks. The emails show schools struggled with recovering data, and going back online after having to turn off all systems. https://www.vice.com/...
  • @mzbat @mzbat on x
    Stolen data was posted to Vice Society's dark web leak site and appears to contain PII, including passport info, SSNs & tax forms. Even more concerning is that the dump contains confidential psychological assessments, conviction reports, and medical history OF CHILDREN. https://t…
  • @jeremy_kirk Jeremy Kirk on x
    The Vice Society ransomware gang released files from @LASchools. @LeonardFiles writes the data includes confidential psychological assessments of students, contract and legal documents, biz records and more. https://www.nbclosangeles.com/ ...
  • @bryantodega Bryant Odega on x
    LAUSD employees and families should be directly notified about this security breach. Why are we only finding out about this through Twitter and the media? Also the call hours should be extended to after school so that folks who work can actually make a call #askLAUSDSup @UTLAnow …
  • @adam_k_levin Adam Levin on x
    “Paying ransom never guarantees the full recovery of data, and Los Angeles Unified believes public dollars are better spent on our students rather than capitulating to a nefarious and illicit crime syndicate.” https://www.bleepingcomputer.com/ ...