[News](/news) Ransomware attack forces Baltimore public schools to close for 115,000+ students [Blog](/blog)[Breaches](/breaches)[Resources](/resources)[News](/news) # Ransomware attack forces Baltimore public schools to close for 115,000+ students ##### [Edward Kost](/team/edward-kost) November 29, 2020 On Wednesday 25th November, Baltimore County’s school network was penetrated by cybercriminals and held hostage in a [ransomware attack](https://www.upguard.com/blog/ransomware). School staff were completely locked out of the internal network forcing the school to shut its virtual doors to 115,000+ students currently attending lessons online. The cyber attack was announced on the Baltimore County Public Schools [Twitter account. ](https://twitter.com/BaltCoPS?ref_src=twsrc%5Etfw%7Ctwcamp%5Etweetembed%7Ctwterm%5E1332793428510461952%7Ctwgr%5E%7Ctwcon%5Es1_\&ref_url=https%3A%2F%2Fbaltimore.cbslocal.com%2F2020%2F11%2F28%2Fbaltimore-county-public-schools-to-close-monday-tuesday-ransomware-cyber-attack-latest%2F)The county police department is working with the state's Emergency Management Agency and the FBI to investigate and resolve the data breach. > Due to issues with our network, all Baltimore County Public Schools and offices will be closed today Wednesday, November 25, 2020. Additional information will be shared as it becomes available. > > — Baltimore County Public Schools (@BaltCoPS) [November 25, 2020](https://twitter.com/BaltCoPS/status/1331583944303783941?ref_src=twsrc%5Etfw) ‍ Details of the cyber attack are being drip-fed on social media as the investigation continues.**‍** > (3/3) We understand how challenging this situation is for families and staff, and we thank you for your patience as we work through this crisis.\ > \ > Please note that future daily updates will be available at 5 pm. > > — Baltimore County Public Schools (@BaltCoPS) [November 28, 2020](https://twitter.com/BaltCoPS/status/1332793430553006080?ref_src=twsrc%5Etfw) ‍ Because the ransomware software has locked staff out of their internal systems, they can only communicate with parents and students via social media posts, and not via email. Ransomware attackers target and encrypt sensitive data and only reverse their actions if a ransom price is paid. Because ransomware is specifically developed to contend remediation efforts, it could take anywhere between a few days to a few weeks for online classes to commence again. It has been announced that the school will remain closed for at least the next two days.**‍** > (1/3) Due to the recent ransomware attack, Baltimore County Public Schools will be closed for students on Monday, November 30, and Tuesday, December 1. BCPS offices will be open and staff will receive additional information about Monday and Tuesday. > > — Baltimore County Public Schools (@BaltCoPS) [November 28, 2020](https://twitter.com/BaltCoPS/status/1332793428510461952?ref_src=twsrc%5Etfw) ‍ The latest findings of the cyber attack investigation revealed that Baltimore County Public School issued Chromebooks were not impacted by the ransomware attack. Students have been permitted to use these devices and associated Google accounts. The security status of school issued Windows-based devices is still questionable. Students are advised to refrain from using these devices until further notice. > (1/3) Our focus today and for Monday and Tuesday is identifying and addressing student and staff device needs so that instruction can continue.\ > \ > We now know that BCPS-issued Chromebooks were not impacted by the cyber attack. > > — Baltimore County Public Schools (@BaltCoPS) [November 29, 2020](https://twitter.com/BaltCoPS/status/1333179920630091777?ref_src=twsrc%5Etfw) ‍ Since August 2020, about [half of U.S public school students](https://www.globest.com/2020/08/14/half-of-us-public-school-students-will-attend-class-remotely/?slreturn=20201029191843#:~:text=About%20half%20of%20school%2Dage,be%20attending%20school%20in%20person.) have been attending classes remotely, with a recent increase following a [spike in Covid-19 cases across the U.S](https://www.nbcnews.com/news/us-news/schools-increasingly-return-online-learning-covid-19-spikes-across-u-n1247301). This increased dependency upon internal systems magnifies the disruption to lesson delivery when a cyber attack takes place. The coronavirus has forced pragmatic institutions like public schools to suddenly digitize their processes. In a rush to meet this rapid requirement, many schools have likely overlooked the prevalence and [risk of data breaches](https://www.upguard.com/product/breach-risk). Since organizations unprepared for cyber attacks are a prime target for cybercriminals, cyber attackers will likely continue to test the security defenses of school systems in the United States and globally. ## How secure is Baltimore County Public Schools? Baltimore County Public Schools operates a public school system serving students in Baltimore County, Maryland. The district provides K-12 education through approximately 176 schools, including elementary, middle, and high schools, as well as specialized magnet programs, technical academies, and alternative learning centers. * View our free preliminary report on Baltimore County Public Schools’s security posture * 13 risk factors, including email security, SSL, DNS health, open ports and common vulnerabilities [View Baltimore County Public Schools's score](/security-report/baltimore-county-public-schools) [View score](/security-report/baltimore-county-public-schools) [https://www.bcps.org/](/security-report/baltimore-county-public-schools) ### Sign up for our newsletter UpGuard's monthly newsletter cuts through the noise and brings you what matters most: our breaking research, in-depth analysis of emerging threats, and actionable strategic insights. ## Latest news Stay up-to-date with the latest news in cybersecurity. [](/news/hugging-face-data-breach-2026-07-20) #### [Hugging Face data breach: key facts and what we know so far](/news/hugging-face-data-breach-2026-07-20) A data breach involving Hugging Face was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [UpGuard Team](/team/upguard) July 20, 2026 [](/news/ey-data-breach-2026-07-19) #### [EY data breach: what happened and what's at risk](/news/ey-data-breach-2026-07-19) A data breach involving EY was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [UpGuard Team](/team/upguard) July 15, 2026 [](/news/south-florida-injury-convenient-care-data-breach-2026-07-16) #### [South Florida Injury & Convenient Care data breach exposes names and Social Security numbers](/news/south-florida-injury-convenient-care-data-breach-2026-07-16) A data breach involving South Florida Injury & Convenient Care was reported in July 2026. See incident details, impact on customers, and security measures. ##### [UpGuard Team](/team/upguard) July 15, 2026 [](/news/park-west-psychology-data-breach-2026-07-16) #### [Park West Psychology data breach: what happened and what's at risk](/news/park-west-psychology-data-breach-2026-07-16) A data breach involving Park West Psychology was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [UpGuard Team](/team/upguard) July 15, 2026 [](/news/fall-river-municipal-credit-union-data-breach-2026-07-16) #### [Fall River Municipal Credit Union data breach: what happened and what's at risk](/news/fall-river-municipal-credit-union-data-breach-2026-07-16) A data breach involving Fall River Municipal Credit Union was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [](#) July 14, 2026 [](/news/npcil-data-breach-2026-07-16) #### [NPCIL data breach: World Leaks claims exposure of Kudankulam Nuclear Power Plant files](/news/npcil-data-breach-2026-07-16) A data breach involving NPCIL was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [UpGuard Team](/team/upguard) July 14, 2026 [View all news](/news) ## Protect your organization Get in touch or book a free demo. [Contact sales](/demo) [Free demo](/demo) ##### Free instant security score ## How secure is your organization? Request a free cybersecurity report to discover key risks on your website, email, network, and brand. * Instant insights you can act on immediately * Hundreds of risk factors including email security, SSL, DNS health, open ports and common vulnerabilities [Free score](/instant-security-score)