Ezekiel Dean Potter, a former senior IT support specialist for the Saydel Community School District, retained access credentials after leaving the district and launched repeated cyberattacks over 21 months. He deleted the district's Facebook page, compromised Apple School Manager accounts by deleting user and device management data, and disrupted access to multiple online services including GoDaddy and Schoology. He also deleted Gmail accounts of district employees, including administrators. Investigators traced some attacks to IP addresses linked to his other employers. Potter pleaded guilty to computer fraud charges and was sentenced to prison and restitution.

The attacks caused widespread disruption to the school district's operations, including impaired access to educational platforms and device management systems, deletion of user accounts, and disruption of classroom activities. The district incurred tens of thousands of dollars in remediation costs. The attacks also temporarily disabled management of district devices and disrupted teacher access to learning management systems.

No specific patch or remediation is applicable as this was an insider threat involving misuse of retained credentials. The attacker has been apprehended and sentenced. Organizations should ensure proper offboarding procedures to revoke access immediately upon employee departure and monitor for unauthorized access. Patch status is not applicable.