Ransomware gang says it hacked a school district in Central Point, Oregon

Ransomware gang Interlock over the weekend took credit for a May 2025 cyber attack on Central Point School District 6 in Oregon.

The district reported a cyber attack disrupted its systems on May 16, 2025, including absence notifications and gradebook updates. It restored systems by June 6, 2025. In a Facebook post, Superintendent Walt Davenport says the attack disrupted internet, email, and communication systems such as ParentVue, CANVAS, and ParentSquare. Students were cut off from accessing schools’ internal servers while restoration was underway.

Interlock claimed responsibility for the attack on its data leak site. It says it stole 2.64 TB of data from the district, including 2 million files across 360,000 directories.

Central Point School District 6 has not verified Interlock’s claim. We do not know if the district paid a ransom, how much Interlock demanded, what data was compromised, or how attackers breached the district’s network.

In an email reply to Comparitech’s questions, District 6 IT manager Chuck Whiteley III said, “At this time, we would not like to comment on any of this. The investigation is still ongoing.”

Who is Interlock?

Interlock is a ransomware gang that first started listing targets on its data leak site in October 2024. The group extorts targets both to unlock infected computer systems and to not sell or release stolen data.

Interlock has claimed responsibility for 19 confirmed ransomware attacks in total, plus 25 unconfirmed claims that haven’t been publicly acknowledged by the targeted organizations.

Six of those confirmed attacks hit US schools:

Ransomware attacks on US education

Comparitech researchers have logged 22 confirmed ransomware attacks against US schools, universities, and other educational facilities in 2025 to date.

Other recent such attacks include:

Ransomware attacks on schools and colleges can disrupt day-to-day operations such as taking attendance, submitting grades, phone and email communications, billing, payroll, assignments, and more. Ransomware attacks are often two-pronged: they lock down systems and steal data. Schools that refuse to pay a ransom face extended downtime, data loss, and putting students and faculty at increased risk of fraud.

About Central Point School District 6

CPSD6 in Central Point, Oregon operates six elementary schools, two middle schools, and one high school. It enrolls about 4,800 students, according to external sources. In addition to Central Point, District 6 also serves nearby Gold Hill and Sams Valley.