Threat actors claim to have successfully attacked Somerset ISD in Texas with ransomware. But did they? Were functions interrupted at all by files being encrypted? Were phones, email, or internet knocked out at all? DataBreaches.net has seen no local news reports of any of that, and there does not appear to be any notice or disclosure of any such attack on the district’s web site or Facebook page.
The ransomware threat actors posted only minimal proof of access to district data, indicating that they will be dumping more data very soon.
The threat actors follow what has become the standard play book — claim that the victim doesn’t care about protecting data, give them a deadline, and then start dumping data:
Somerset ISD, the organization does not want to cooperate with us and prefers not to care about the organization’s reputation, but only about its personality.
We leak into several files and give the organization an additional 96 hours to react, if this is not the case, we will make a complete leak of valuable documents and other valuable information.
DataBreaches.net sent email inquiries to the district about the claimed attack but has received no reply as yet.