"We are currently investigating a network interruption," Steve Archibald, the district's superintendent, said Tuesday. "Upon learning of the incident, we took certain systems offline out of an abundance of caution and began a thorough investigation with leading information technology experts."
He added: "Our primary focus remains on a safe and efficient remediation process and the restoration of our systems. We are working diligently to get students back in school as soon as possible."
Khalid Malik, professor of computer science and director of cybersecurity for the University of Michigan-Flint, said Tuesday that while he wasn't familiar with the specific circumstances of the incident involving South Lyon Schools, hackers have used cyber attacks against schools and hospitals for years. "Usually, they are ransomware attacks," Malik said.
He said hackers have turned to using artificial intelligence, which has made launching cyber attacks easier.
The South Lyon Schools incident is the most recent cyber attack against a Michigan school.
Two years ago, Lansing Community College said it canceled classes and activities for two days in March because of a cyber attack.
In August 2023, a cyber attack against the University of Michigan enabled hackers to gain access to students' personal information and sparked two lawsuits.
The year before, two school districts — the Jackson County Intermediate School District and Hillsdale Community District Schools — were closed for most of a week after a ransomware attack.
©2025 The Detroit News. Distributed by Tribune Content Agency, LLC.
