# Richmond Schools Restore Networks After Cyberattack

Richmond Public Schools (RPS) confirmed that personal information belonging to current and former students, employees, and contractors was posted on the dark web following a cyberattack. RPS is restoring its network, conducting a forensic audit with federal officials, and expanding identity-monitoring services. No solicitation, contract award, or procurement timeline has been reported, but the incident identifies potential needs in incident response, network recovery, and cybersecurity services.

- RPS’s recovery effort involves a complex environment spanning more than 50 sites and serving over 22,000 students and 4,000 teachers and staff, according to Chief Operating Officer Patrick Herrel.
- Cybersecurity and incident-response contractors can review RPS procurement notices for future requirements; the reported response does not establish that an opportunity is currently open.
- The exposure of data affecting students, employees, and contractors highlights the importance of recovery capabilities and identity-monitoring services in education-sector cybersecurity planning.

**Jurisdictions:** sled
**Industries:** Education, Information Technology
**Topics:** Cybersecurity
**Published:** November 12, 2026

### Government Entities
- Richmond Public Schools (RPS)
- Federal Bureau of Investigation, Cyber Crimes Division (FBI)
- Virginia State Police, Virginia Cyber Fusion Center (VSP)
- Cybersecurity and Infrastructure Security Agency (CISA)

### Key Quotes
> As you know we have over 50 sites across the division, with over 22,000 students, and over 4,000 teachers and staff, restoring an environment that complex has been an incredible task and the technology team has worked hard to bring RPS online.
> — Patrick Herrel, Chief Operating Officer

> When will you have a director of technology position filled? And when will the forensic audit be completed?
> — Mariah White, former 2nd District School Board member

### Sources
- [RPS technology director left weeks before cyber attack that put personal information on dark web](https://www.richmonder.org/rps-technology-director-left-weeks-before-cyber-attack-that-put-personal-information-on-dark-web) - The Richmonder