List of Ransomware Attacks Against Schools in 2021

Nicole Kanu filed this request on behalf of Allan Liska with the Department of Education of Arkansas.
Submitted Aug. 4, 2021
Status
Rejected

Communications

From: Allan Liska

Subject: Arkansas Freedom of Information Act Request: List of Ransomware Attacks Against Schools in 2021

Email

To Whom It May Concern:

Pursuant to the Arkansas Freedom of Information Act, I hereby request the following records:

A list of all schools or school districts in Arkansas that have been victims of ransomware attacks in 2021 through July 31st. If possible, I'd like the school/district name, date of attack and the ransomware strain involved.

The requested documents will be made available to the general public, and this request is not being made for commercial purposes.

In the event that there are fees, I would be grateful if you would inform me of the total charges in advance of fulfilling my request. I would prefer the request filled electronically, by e-mail attachment if available or CD-ROM if not.

Thank you in advance for your anticipated cooperation in this matter. I look forward to receiving your response to this request within 3 business days, as the statute requires.

This request is filed by Nicole Kanu, a citizen of Arkansas, in coordination with Allan Liska.

From: Department of Education

Subject: RE: Arkansas Freedom of Information Act Request: List of Ransomware Attacks Against Schools in 2021

Email

Good morning! Thanks for following up on this request, and I apologize for your wait on a response. The records your seek are exempt from disclosure. Attached is HB 1110/Act 260 of 2021. A.C.A. § 10-4-429(e) states: A report, update, notification, or list created or maintained under this section is exempt as a security function under §25-19-105(b)(11)

A.C.A. § 25-19-105(b)(11): It is the specific intent of this section that the following shall not be deemed to be made open to the public under the provisions of this chapter: (11) Records containing measures, procedures, instructions, or related data used to cause a computer or computer system or network, including telecommunication networks or applications thereon, to perform security functions, including, but not limited to passwords, personal identification numbers, transaction authorization mechanisms, and other means of preventing access to computers, computer systems or networks, or any data residing therein

If you have any questions, please let me know.
Best,

Brittany Kincaid, M.Ed.
Operations Manager
Arkansas Department of Education
Legal Services
4 Capitol Mall, Rm. 301-A
Little Rock, AR 72201

Files

pages

 Close