Las Cruces scrubs 30K computers

District’s cyber attack response includes erasing hard drives

LAS CRUCES - Las Cruces Public Schools Interim Superintendent Karen Trujillo’s updated the recent cyber attack that targeted the school district last week, noting that some 30,000 computers need to by cyber cleaned.

Trujillo said the virus infiltrated the district’s systems at about 4 a.m. Oct. 29, and by 7:30 a.m. information technology staff had shut down all of the district’s internet servers and isolated the malware.

The district’s system was infected with ransomware, a malicious program designed to lock access to computer or data systems until a ransom is paid.

Matt Dawkins, the district’s information technology director, said a cybersecurity consultant was assisting the district in implementing a disaster recovery plan that had been put in place.

Dawkins said the district did not engage with the hacker but said it was evident the culprit had obtained information about the district’s network systems “weeks” prior to introducing the malware.

He said no determination had yet been made as to whether the malware was introduced via email attachment or other means.

The Las Cruces Police Department told the Sun-News the case had been referred to federal law enforcement.

Dawkins said 30,000 devices across the district need to be cleaned, in a process that includes erasing their hard drives and reinstalling operating systems, before they are allowed access to the internet.

The district also would evaluate its current infrastructure.