Evanston Township High School closed for two days in June 2026 after a targeted ransomware attack disrupted computer infrastructure, internet services and other electronic systems. Summer school classes, camps and additional campus activities were cancelled for at least two days.
A School Closure Is A Childcare Failure
Coverage of school ransomware tends to focus on student records. The immediate consequence is different and lands entirely on families: children who were supposed to be somewhere are not, on a few hours’ notice, in the middle of a working week.
Summer programmes make that sharper. Camps and summer classes exist substantially because parents work, and there is no equivalent of a snow day plan when the closure is unplanned and open-ended.
Why A School Cannot Simply Operate Without Systems
It is reasonable to ask why teaching cannot continue on paper. The answer is safeguarding rather than pedagogy: attendance registers, emergency contacts, medical information and authorised-collection lists are the systems a school is legally obliged to maintain.
A school that cannot confirm which adult may collect a particular child cannot responsibly open. That is a defensible closure decision, and it means the system availability threshold for schools is higher than the teaching function alone suggests.
The Word “Targeted” Is Doing Work
Reporting describes the attack as targeted rather than opportunistic. If accurate, it undercuts the assumption many districts operate on — that they are too small and too poor to interest anyone.
The sector research filed at 26-0228 and 26-0305 explains why that assumption was always weak: the data is sensitive, the capacity is thin, and disruption produces immediate public pressure. That is an attractive combination regardless of budget.
Compiled from public reporting, listed below. The characterisation as targeted is as reported. No attribution has been established and any data impact is undisclosed. Corrections: corrections@forensicpost.com.