Ransomware Disrupts Virginia and New York School Districts

Ransomware incidents disrupted Richmond Public Schools (RPS) in Virginia and the Oneonta City School District in New York during October 2026. The districts took different approaches to keeping education moving: Richmond kept all 53 campuses open, while Oneonta closed for two days and expected to resume classes on October 27. The events underscore how cyber incidents can quickly affect instruction and day-to-day district operations, even when a school system remains physically open.

Richmond shifted instruction to printed materials while arranging Chromebook access for teachers. Superintendent Jason Kamras said, “All teachers should be receiving Chromebooks today or tomorrow to allow them to access all RPS platforms.” That statement points to practical continuity requirements beyond technical remediation: educators need devices and access to instructional platforms, while schools may need alternate ways to distribute lessons and maintain classroom activity. The reported response does not establish what systems were affected or whether data was accessed or lost.

Oneonta’s two-day closure and anticipated October 27 reopening reflect a different continuity posture, with instruction interrupted while the district responded to the incident. Across both cases, potential procurement needs could include incident-response assistance, system restoration, cybersecurity assessment, continuity planning, secure device support, and network services. Richmond’s use of printed materials also illustrates that operational resilience may depend on non-digital resources when online or platform-based instruction is disrupted. These are potential requirements inferred from the response measures, not confirmed purchases.

For government contractors, the incidents are market signals rather than evidence of an active opportunity. No solicitation, contract award, spending amount, deadline, or named supplier was reported, and no confirmed data loss was identified in the supplied information. Companies serving K–12 clients can assess whether their education-sector cybersecurity and recovery capabilities align with the needs described, while avoiding assumptions about district requirements, procurement plans, or incident scope. Any pursuit should be based on verified notices or direct district procurement information.

• Richmond Public Schools kept all 53 campuses open during its ransomware response.
• Richmond shifted instruction to printed materials and arranged Chromebook access for teachers.
• Superintendent Jason Kamras said teachers would receive Chromebooks “today or tomorrow” to access RPS platforms.
• The Oneonta City School District closed for two days and expected to resume classes on October 27, 2026.
• Potential service areas include incident response, recovery, cybersecurity assessment, and continuity planning.
• Device, network, and instructional-platform support may be relevant to school continuity after a cyber disruption.
• Printed instructional materials can serve as an operational fallback when digital access is disrupted.
• No solicitation, award, spending amount, procurement deadline, named supplier, or confirmed data loss was reported.
• Contractors should treat the events as market signals, not as evidence of an active procurement opportunity.