CRBC News
Security

‘Level 4’ Cyberattack Forces Springfield Schools to Close; Student Medical Records and Systems Disrupted

‘Level 4’ Cyberattack Forces Springfield Schools to Close; Student Medical Records and Systems Disrupted
Massachusetts school system cancels classes after 'Level 4' cyberattack

Springfield Public Schools canceled classes through Monday after a "Level 4" cyberattack disrupted access to online systems, including students' medical records, district email, phones and computers. The incident began on Sept. 1 and escalated when an outside group gained access to the SPS network. Superintendent Sonia E. Dinnall said officials consulted outside experts before deciding to delay reopening. Federal, state and local authorities are investigating, and officials have not yet confirmed whether data was compromised.

Thousands of students in Springfield, Massachusetts, missed classes after a "Level 4" cyberattack targeted Springfield Public Schools (SPS), disrupting access to critical online systems and services, officials said.

Springfield Public Schools announced that buildings would remain closed through Monday while federal, state and local law enforcement work with district IT and outside specialists to investigate the incident and restore services. The district said the attack "blocked the district's ability to access certain online programs."

‘Level 4’ Cyberattack Forces Springfield Schools to Close; Student Medical Records and Systems Disrupted
WGGB - PHOTO: Wednesday marked the second day that schools in Springfield were closed due to a severe cyber security breach. We know the district's nearly 30,000 students, won't return until next Monday.

Impact on Services: Among the systems affected was access to students' medical records — information nurses rely on to dispense medication and check allergies — as well as district email, phones and computers. SPS, one of the state’s largest districts, said it serves more than 23,000 students; a local report cited nearly 30,000 students affected, a discrepancy the district did not clarify in its initial statements.

The district reported the problem began on Sept. 1, about a week after the new school year started, and escalated over the weekend when, the district said, "an outside group gained access to the SPS network." That escalation prompted officials to delay reopening while forensic teams assess the scope and secure systems.

‘Level 4’ Cyberattack Forces Springfield Schools to Close; Student Medical Records and Systems Disrupted
WGGB - PHOTO: Springfield Public Schools Superintendent Dr. Sonia E. Dinnall speaks with reporters on Sept. 9, 2026.

"We have been very strategic, very intentional, collaborating with all of the partners that we brought on board to support us through this situation,"
Superintendent Sonia E. Dinnall told reporters on Sept. 9, 2026, explaining that recommendations from specialists led to the decision to keep schools closed until teams can ensure safe operations.

SPS said investigators have not yet determined whether student or staff data was compromised. Authorities at federal, state and local levels are coordinating the probe, and the district is working to restore access to critical systems before students return. Parents and staff were notified of the closures, and officials urged patience as technical and forensic teams continue their work.

The investigation is ongoing.

Help us improve.

Related Articles

Trending