OCEANSIDE — Oceanside Unified School District officials confirmed the district has been battling a significant cybersecurity incident that has disrupted email, internet access, Google Drive and ClassLink programs since July 24.
Scale and services affected
District leaders and union sources say the network compromise has forced staff to limit or shut down several core services while third-party forensic teams and the district's IT staff work to identify the nature and extent of the breach. The disruption comes as the district prepares for a new school year; Oceanside Unified employs roughly 1,500 staff and serves more than 15,000 students across 21 schools and an adult transition academy, according to the district website.
- Impacted systems: work email, internet connectivity for district accounts, Google Drive and ClassLink-linked programs.
- Operational consequences: registration and other administrative functions are reportedly degraded, with sources warning some processes could be delayed by as much as two weeks.
- Investigation status: district working with outside cybersecurity experts and has elevated the incident to the FBI.
District response and federal involvement
In a brief statement, Donald Bendz, the district’s director of communications, confirmed the disruption and said outside specialists are assisting the ongoing probe. The district declined to provide additional specifics pending the investigation.
“OUSD recently discovered a computer network disruption and immediately began working with our IT staff and third-party forensic specialists to investigate the nature and scope of the incident.”
Sources inside the district told NEXO RADAR that staff were racing to isolate systems — described colloquially as "pulling the plugs" — out of concern attackers were accessing information from the district database. The district has not publicly detailed whether student, staff or family personal data were accessed or exfiltrated.
Local concerns: military-connected families and Camp Pendleton schools
Three Oceanside Unified campuses — North Terrace, Stuart Mesa and Santa Margarita — are located on Camp Pendleton. That proximity has heightened community concern because those campuses enroll military children, and some parents worry information tied to service members or their families could be at risk if the attackers accessed sensitive records.
FBI representatives in Washington, D.C., and the bureau’s San Diego office declined to comment on the record to local reporters. Sources familiar with the incident told NEXO RADAR the case has been elevated to the FBI, a move that typically indicates either potential criminal activity crossing jurisdictional lines or a need for federal cybersecurity resources.
| Item | Detail |
|---|---|
| District size | ~1,500 employees; >15,000 students; 21 schools; 1 adult transition academy |
| Services disrupted | Email, internet for district accounts, Google Drive, ClassLink programs |
| Investigation | OUSD IT staff + third-party forensic specialists; FBI involvement reported |
What families and staff should expect
District communications via the Oceanside Teachers Association newsletter and internal sources indicate officials will provide updates when more is known. For now, families trying to register students or access school portals may face delays. Teachers and staff have shifted to contingency processes where possible while core network functions are restored.
Steps the district is reportedly taking include isolating affected systems, coordinating with forensic specialists to determine if data were accessed, and working to restore services securely. The timeline for a full return to normal operations remains uncertain.
The disruption is the latest in a string of cyber incidents affecting public agencies nationwide, highlighting the vulnerabilities of large networks that handle student records, payroll and other sensitive data. For Oceanside — where the school district is among the city’s largest employers and a central civic institution — the incident poses logistical challenges ahead of the new school year and raises questions about data security for students, staff and military families.
NEXO RADAR will continue to follow developments and report official updates from the district and federal investigators as they become available.
