2019/2020 Sherman School Cyber Incident & Retention Logs
Records Date: April 2, 2026
This request demands records from 2019 to 2020 concerning a data breach and ransomware incident at the Sherman School. It specifically targets communications containing keywords like "ransomware" and "hack", financial records for IT vendors like "Network Support", and formal incident reports filed with law enforcement. Notably, the request includes a preemptive legal demand for the state-authorized Records Disposal Authorization (Form RC-075) if the town claims the documents were purged under state retention schedules. The request was formally acknowledged by BOE Chair Matt Vogt on April 3.
UPDATE: After the First Selectman’s office completely ignored the initial request, a formal appeal (Docket #FIC 2026-0363) was filed with the state FOIC on April 15, 2026, citing constructive denial. Following an administrative notice from the state, a formal cure of deficiencies was submitted on June 22, 2026, officially amending the respondents to include the Town of Sherman and the Board of Education. Under the pressure of this active docket, the administration produced a single, 70-page merged PDF on July 3. However, they heavily redacted the provided communications, citing statutory exemptions under Conn. Gen. Stat. § 1-210(b)(20) (security of information technology systems) and Conn. Gen. Stat. § 1-210(b)(10) (attorney-client privileged communications).