Spokane Public Schools reported a network security incident that began late on Sept. 20, 2026. As a precaution, the district took several systems offline, which caused service disruptions for families and staff. District officials were notified of the threat on the evening of Sunday, Sept. 20, and a third-party technical expert has been brought in to investigate.
As of the most recent reporting, no threat actor has been publicly named, no method of attack has been confirmed, and ransomware has not been mentioned in available sources. The district has said it is too early to speculate on responsibility, and the question of who is behind the incident remains unresolved.
What the sources say was affected
- PowerSchool: the student information system used by the district to manage enrollment, grades and family contact details.
- Payroll system (BusinessPlus): the system used to pay district staff, which typically holds names, addresses, Social Security numbers, bank routing details and tax forms.
- Other online information systems: grades and attendance systems were still offline in Sept. 24, 2026 reporting, which limited normal day-to-day operations.
The district said preliminary findings show only district staff were affected, and that those people have been notified. Staff have worried about being paid at the end of the month while the payroll system is down. The district has not yet determined the extent of any information involved. Sources do not confirm that student data was taken, and no public reporting confirms a ransomware payment or a data leak post.
Whether this touches a small business
You may not run a school, but the connections can still be real. If you live in the Spokane area and have a child in the district, your family is a customer of the affected services and may notice delays, missed notifications or limited access to grade and attendance tools. If your business is one of the vendors or contractors that works with Spokane Public Schools, your invoices, account details or staff records may sit in the same systems the district just took offline.
Even if none of that applies to you directly, staff records can include names, addresses, Social Security numbers, direct deposit details and tax forms. A confirmed staff-side impact can ripple outward to spouses, dependents and former employees whose information is still on file. Sources do not yet confirm what, if anything, was actually taken, so the most useful move is to treat any official update from the district as the most reliable current answer.
What to do this week
- Watch for direct notice from the district. If your information sits in a confirmed affected group, Spokane Public Schools is expected to tell you. Keep any letter or email they send, and note any deadlines or instructions they include.
- Check your payroll and banking records if you are a district employee, contractor, or vendor. Look for unfamiliar deposits, changed direct deposit information, or new payees you did not add. Call your bank the same day if you see anything off.
- Place a free fraud alert with one of the three credit bureaus if you are told your data was exposed. This is free, lasts one year, and applies across all three bureaus. Equifax, Experian and TransUnion are the three to contact, and you only need to call one to start.
Spokane Public Schools says it is keeping systems offline until investigators consider it safe to bring them back. The situation is still developing, and the facts above reflect what sources reported as of Sept. 24, 2026.
Sources: The Spokesman-Review, KXLY, DataBreaches.net | Written with AI assistance and checked against these sources on September 25, 2026
Related
- Ransomware attack tracker: search an organization and get alerts
- Am I Breached? Check an address and get alerts