Newberg-Dundee School District in Yamhill County, Oregon, told families and staff on 12 June 2024 that it had found unusual activity on its computer network. Interim superintendent Paula Radich wrote that phones and computers were affected, and that the district had moved to secure the network and had engaged outside cybersecurity specialists.
Local reporting quickly pointed to ransomware. The Yamhill Advocate reported on 22 June that the FBI had characterised the attack as ransomware in nature, and noted that the district had retained a law firm known for defending organisations against data breach litigation. District officials would not confirm the nature of the attack. Communications director Jillian Daley told the Newberg Graphic that the district could not comment on an open investigation.
Some systems and data were temporarily inaccessible, although staff regained access within about a day. All students and staff were required to reset their passwords, and summer school ran as scheduled from 18 to 28 June. The district said it had notified local, state and federal authorities.
The full scope emerged much later. The Newberg Graphic reported in January 2025 that more than 5,000 district patrons had personal information exposed, including Social Security numbers for some, and that the district had offered credit monitoring, opened a support hotline and retained a forensics firm to review the intrusion.