According to the Department of Public Instruction (DPI), when Wisconsin school districts are hit by a ransomware attack, they are not required to report these incidents either internally or publicly with parents and students, regardless of whether their information has been compromised.

MADISON, Wis. — When a ransomware attack in October locked Janesville School District students, staff and families out of various online programs, parent Neanda Annen said her initial reaction was to laugh, guessing that a student had attempted to keep their grades hidden.

But after the district notified families that they were in contact with the FBI and Department of Homeland Security, Annen recognized the severity of the situation.