The Muscogee County School District in Georgia experienced a ransomware attack in December 2024, attributed to the SafePay ransomware gang. The breach compromised current and former employees’ sensitive data, including names, Social Security numbers, and bank account numbers, affecting 34,056 individuals. SafePay claimed to have stolen 382 GB of data, though the district has not verified the full extent of the theft. The attack was detected on December 26, 2024, with unauthorized access occurring between December 12 and December 26, 2024. The district began issuing data breach notifications in February 2025, offering affected individuals free credit monitoring and identity theft restoration via Kroll. SafePay, a LockBit-based ransomware group, employs double extortion, demanding payment for both system restoration and data deletion. While the ransom amount (if paid) remains undisclosed, the attack ranks as the 10th-largest in 2024 by records compromised among US educational institutions. The incident highlights the growing threat of ransomware targeting public school districts, with SafePay alone responsible for six confirmed attacks on educational entities since late 2024.