Alamo Heights ISD Data Breach Exposes Personal Information of Over 26,000 The Alamo Heights Independent School District (AHISD) disclosed a March data breach that compromised the personal information of more than 26,000 individuals, according to a filing posted on the Texas Attorney General’s website on Monday. The exposed data included Social Security numbers, driver’s license numbers, and financial or medical records. The breach stemmed from a late-March cyberattack that disrupted district operations, leaving staff and students without internet access for nearly a week. AHISD confirmed the incident was linked to the attack referenced in the filing. A forensic investigation later revealed that personal information was accessed and potentially downloaded, prompting the district to notify affected individuals via U.S. mail, as required by Texas law. Texas regulations mandate that government entities report breaches affecting 250 or more residents to the attorney general within 30 days. While AHISD provided updates to the community during the incident, officials did not disclose the full scope of the attack or whether a ransom was paid. The district’s cyber insurance covered over $36,000 in system restoration costs, as revealed in a public records request. Ransomware attacks on school districts have become increasingly common in Texas. In 2021, Judson ISD paid hackers over $500,000 to protect stolen data after a month-long disruption, while Uvalde CISD canceled classes in September due to a similar attack. In response, Texas lawmakers passed Senate Bill 820 in 2019, requiring districts to implement cybersecurity policies, designate a coordinator, and report breaches to the Texas Education Agency (TEA). To bolster defenses, the TEA launched a K-12 Cybersecurity Initiative in 2023, with an additional $42 million in funding approved by legislators to extend the program through 2027. The initiative aims to help districts prevent ransomware and phishing attacks.