{
  "$type": "site.standard.document",
  "bskyPostRef": {
    "cid": "bafyreiaxtqbli3u4d5afiyjlo2vdveitw656kwclcihkyk6swsjq2c54oy",
    "uri": "at://did:plc:3mf3ql5qtnfwownblde4355r/app.bsky.feed.post/3mmbpdka2bzz2"
  },
  "coverImage": {
    "$type": "blob",
    "ref": {
      "$link": "bafkreiboolbvow3kptq4nsjbxiex3t2ftxewjnojcef6ebrabyr6y4dioq"
    },
    "mimeType": "image/webp",
    "size": 27562
  },
  "description": "The district said its network was compromised Monday night and classes will remain out until experts determine systems are safe.",
  "path": "/delano-schools-cyber-incident/",
  "publishedAt": "2026-05-20T10:33:10.000Z",
  "site": "https://dysruptionhub.com",
  "tags": [
    "first reported",
    "Kentwood Public Schools",
    "Spring Lake Park Schools",
    "Denmark School District"
  ],
  "textContent": "Delano Public Schools canceled Wednesday classes after a Monday night cyber incident compromised the district network and led officials to shut down internet access while experts tested systems.\n\nThe closure disrupted in-person learning for a district of about 2,400 students and 370 staff members in Delano, Minnesota, west of Minneapolis. The district has not publicly confirmed ransomware, data theft or a ransom demand.\n\nWCCO first reported the district described the event as a “cyber incident.” Superintendent Matt Schoen told the station that internet access was shut down immediately after the network was compromised “so no further damage could be done,” and that teams were working to identify and fix the issue.\n\nSchoen told WCCO it was not clear whether the incident was an attack, but said the district network had been compromised. Students will not return to class until experts test the network and determine it is safe, the station reported.\n\nDelano Public Schools did not respond to a DysruptionHub email Wednesday seeking details about affected systems, possible data access and when classes might resume. The specific nature of the incident and who may be responsible remain unknown. No public claims of responsibility had been found as of Wednesday morning.\n\nA Delano Public Schools website notice says school was canceled Wednesday, May 20, 2026.\n\nThe district’s public website remained reachable Wednesday morning, but its only visible notice about the disruption said school was canceled for the day. The notice did not describe the nature of the incident.\n\nDelano Public Schools says it serves about 2,400 students and 370 staff members in Delano and families from nearby communities including Corcoran, Greenfield, Hamel, Independence, Loretto and Medina.\n\n****Chip in once****\nIf this reporting helped you, a one-time tip helps cover hosting, tools and future investigations.\n\nTip us\n\n****Support us monthly****\nA small monthly pledge keeps independent coverage and our reader tools online for everyone.\n\nBecome a Supporter\n\nOther regional K-12 districts have faced recent cyber-related disruptions. In Michigan, Kentwood Public Schools said a student used malicious software to disrupt Wi-Fi across the district before outside experts isolated the issue and connectivity appeared restored. In Minnesota, Spring Lake Park Schools canceled classes for two days in April after an outside actor accessed some systems in what the district described as a cybersecurity incident. In Wisconsin, Denmark School District had a five-day internet outage after what local reporting described as a cyber incident, and a ransomware group later claimed responsibility, a claim DysruptionHub could not independently confirm.\n\nOfficials have not said what Delano systems were affected beyond the district network and internet access. They also have not publicly said whether any student, staff or family data was accessed, whether law enforcement is involved or when classes may resume.\n\nAs of Wednesday, the district’s return-to-class timeline depended on outside testing of the network, and no ransomware group, ransom demand or data theft had been confirmed.\n\n****Attribution note:**** DysruptionHub credits upstream reporting and primary sources—see citations above. If this report informed your coverage, please cite DysruptionHub with a link.",
  "title": "Delano, Minnesota, schools closed after cyber incident",
  "updatedAt": "2026-05-20T10:33:10.630Z"
}