Before the district could decide to pay the first ransom from an attack in June, administrators discovered a second attack earlier this month.