Alvin Independent School District over the weekend confirmed it notified 47,606 people about a June 2024 data breach that compromised the following personal info:
- Names
- Social Security numbers
- Credit and debit card numbers
- Financial account numbers
- Medical info
- Health insurance info
- State-issued ID numbers such as driver’s licenses and passports
The Texas attorney general reported the breach on its website on May 2, 2025.
Ransomware gang Fog claimed responsibility for the attack in July 2024. The group says it stole 60 GB of data from the Texas school district.
AISD has not verified Fog’s claim. We do not know if the district paid a ransom, how much Fog demanded, or how attackers breached AISD’s network. Comparitech contacted Alvin Independent School District for comment and will update this article if it replies.
“On or about June 13, 2024, Alvin Independent School District experienced a cybersecurity incident involving an unauthorized attempt to access data on our network. This incident caused interruptions to certain internal computer systems,” said a notice (PDF) issued by AISD shortly after the attack. “[…] we believe that Personally Identifiable Information (PII) of some students and employees may have been compromised.”
Who is Fog?
Fog is a ransomware gang that first started claiming attacks on its website in July 2024. It has a history of targeting US schools but is not limited to them. In addition to encrypting files, Fog also steals data and targets development environments.
Alvin Independent School District was one of Fog’s first victims, along with West Allis-West Milwaukee School District and Asbury Theological Seminary, which both confirmed attacks in the same month.
Fog has claimed a total of 20 confirmed ransomware attacks, 12 of which were on educational institutions. Most recently, the gang attacked the University of Applied Sciences and Arts Northwestern in Switzerland.
Fog claimed another 157 unconfirmed attacks that haven’t been acknowledged by the targeted organizations, 80 of which it claimed in 2025. However, the group stopped posting new victims in April.
Ransomware attacks on US education
In 2024, Comparitech researchers logged 79 confirmed ransomware attacks on US schools and colleges. Those attacks compromised 2,857,156 records and came with an average ransom demand of $827,000.
Other recently confirmed attacks on US schools include:
- Ransomware gang Medusa demanded $400,000 from Fall River Public Schools in April 2025
- Ransomware gang Qilin attacked Western New Mexico University in April 2025
- Albion College notified 6,930 people of a December 2024 data breach claimed by Medusa
- Southern Arkansas University Tech was hit by RansomHub in October 2024
- Hacienda La Puente Unified School District was hit by unknown attackers
In 2025 to date, we’ve tracked 15 confirmed ransomware attacks on US education, plus 36 unconfirmed claims.
About Alvin Independent School District
South of Houston, Texas, Alvin Independent School District serves the communities of Alvin, Manvel, Hillcrest, Iowa Colony, Liverpool, Pearland, Amsterdam, and Rosharon. The district enrolls more than 27,000 students and employs more than 3,000 staff, according to external sources. It includes four high schools, nine junior high schools, and 21 elementary schools.
Source link
-
-
-
-
-
-
-
-
