> ## Content Index
> Fetch the complete content index at: https://www.richmonder.org/llms.txt
> Use this file to discover other available public pages before exploring further.

# RPS technology director left weeks before cyber attack that put personal information on dark web
- URL: https://www.richmonder.org/rps-technology-director-left-weeks-before-cyber-attack-that-put-personal-information-on-dark-web/
- Published: 2026-11-12T02:25:00.000Z
- Updated: 2026-11-12T02:25:00.000Z
- Description: “We are deeply disturbed by this criminal act, and we understand how concerning it is to learn that personal information may have been compromised.”
- Author: Victoria A. Ifatusin
- Tags: Education, #the-bridge

Richmond Public Schools announced Wednesday evening in a press release that personal information of current and past students, contractors and staff was indeed posted to the dark web following last month’s cybersecurity breach.

“We are deeply disturbed by this criminal act, and we understand how concerning it is to learn that personal information may have been compromised,” the press release read. 

At the Richmond School Board meeting Tuesday night, Chief Operating Officer Patrick Herrel read aloud a statement telling the public a forensic audit into the attack is underway, and that the division cannot answer any questions as the situation is being investigated with federal officials.

“As you know we have over 50 sites across the division, with over 22,000 students, and over 4,000 teachers and staff, restoring an environment that complex has been an incredible task and the technology team has worked hard to bring RPS online,” he said. 

The technology team is currently working on creating a permanent network, as well as a division-wide password reset, a “common and recommended” action that takes places after such an incident. 

The division’s previous director of technology services, Tim Tillman, resigned from the position on Oct. 1 this year, just weeks before the incident. 

Tillman has spent most of his career in K-12 technology, including time with Chesterfield County Public Schools. He is currently listed as an employee at Reynolds Community College. Information about his time at RPS, or why he left, was not immediately available.

### **What was compromised in the hack**

Last month, RPS servers and operational systems went down as a result of the cybersecurity incident. A notice informing employees that the “organization is in danger” appeared on multiple screens across the district.

The incident initially interrupted basic school functions like printing paper, and access to online classroom tools and learning platforms. High school students also [told news outlets that the breach was impacting their ability](https://www.axios.com/local/richmond/2026/10/26/richmond-public-schools-cybersecurity-incident) to apply for [college applications and submit transcripts](https://www.vpm.org/news/2026-10-30/rps-cybersecurity-hack-cassidy-eversoll-open-high-kamras/). 

The division has since set up a temporary network, and Chromebooks that operate on a different server were provided to teachers and staff.

Threat actors claimed they accessed personal information of current and former students, staff, and contractors likely including names, birth dates, phone numbers, addresses, driver’s license numbers, Social Security numbers, passport numbers, military identification numbers, health insurance numbers, and some medical information as it pertains to supporting educational or employment needs. 

During public comment Wednesday evening, former 2nd District School Board member Mariah White brought up teacher and student concerns, and asked what actions the division was taking.

“When will you have a director of technology position filled? And when will the forensic audit be completed?” she asked. 

RPS has expanded its offer of complimentary identity monitoring services to former students and employees. The division has shared more information online about the situation, [including how current and former school members can enroll for free credit monitoring through Experian](https://www.rvaschools.net/notice-of-cyber-incident). 

RPS has contacted and is cooperating with local and federal law enforcement, including the FBI’s Cyber Crimes Division, the Virginia State Police’s Virginia Cyber Fusion Center and the Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency.

Cybersecurity breaches have been occurring in other school districts across Virginia and the country as well. The press release referred to a report from the Center for Internet Security, the Multi-State Information Sharing and Analysis Center, and the Consortium for School Networking indicating that more than half of surveyed schools experienced a cybersecurity incident last year. 

Earlier this year in March, Hanover County Public Schools experienced a breach where investigators learned that a “malicious actor gained access to HCPS network data and attempted to deploy ransomware to encrypt portions of the network.”

*Contact Reporter Victoria A. Ifatusin at* [*vifatusin@richmonder.org*](mailto:vifatusin@richmonder.org)