Botetourt County Public Schools reports cybersecurity incident, data posted on the dark web

Botetourt County Public Schools in Virginia report a cybersecurity incident that compromised its network in May 2025. Some of the stolen data has subsequently been posted on the dark web. 

The district discovered the cybersecurity incident on their network earlier in May 2025, engaged cybersecurity experts to assess and resolve the incident. The district is coordinating with state and federal law enforcement authorities. Since the incident was first reported, the school district learned that some of the data that was inappropriately accessed during the incident has been posted on the dark web.

The nature of the attack, the exposed data types and the number of affected individuals is not disclosed. 

The district's cybersecurity experts are still reviewing the compromised information to determine if it contains personal information belonging to students or employees. The investigation process is expected to take several days.