Louisiana Gov. John Bel Edwards declared a statewide emergency Wednesday following a series of cyberattacks that have disabled computer systems in three school districts in the northern part of the state. While the incidents appear to be limited to the three districts, Edwards said he made the declaration in part out of concern that the attacks could spread to other parts of local or state government.
“The state was made aware of a malware attack on a few north Louisiana school systems and we have been coordinating a response ever since,” Edwards said.
The specific nature of the cyberattacks, which are impacting IT infrastructure in schools in Morehouse, Ouachita and Sabine parishes, has not been revealed, though they appear to have started more than two weeks ago. An alert on the website of the Monroe City School System, in Ouachita Parish, states it experienced a “disruption” on July 8. The Sabine Parish schools said Wednesday that it was hit by an “electronic virus” on Sunday that has disabled some technology systems, including phones at the district’s central office. Digital phone systems are known to be vulnerable to ransomware attacks, though none of the attacks against the Louisiana schools have been publicly identified as using ransomware.
While the cyberattacks against the school districts had already been referred to state and federal investigators, Edwards’ emergency declaration frees up a host of additional resources to potentially mitigate the incidents. The attacks will now be investigated by cybersecurity experts from the Louisiana National Guard, Louisiana State Police and the state’s Office of Technology Services, as well as Louisiana State University. But as a formal emergency, the response will be led by the state Office of Homeland Security and Emergency Preparedness, often the lead agency in natural disasters like hurricanes.