RYE NECK, NY (September 23, 2026) — Rye Neck Schools warned the community Wednesday that several staff email accounts were compromised in a phishing campaign and then used to send an illegitimate message offering items for sale.
Phishing is a form of online fraud in which an attacker uses a deceptive email, message or website to trick someone into providing login credentials or other sensitive information. Once an attacker obtains a username and password, the attacker may be able to log into the victim’s actual email account and send messages that appear to come legitimately from that person. Rye Neck Schools did not disclose how the staff accounts were compromised beyond saying they were compromised through a phishing campaign.
The district said the fraudulent email was sent earlier in the day from several staff accounts and included a list of items for sale.
Because the messages came from genuine staff accounts, recipients may have believed they were legitimate. The district advised recipients not to reply to the external Gmail address included in the message and not to send money or attempt to purchase any of the listed items.
Rye Neck Schools said it sent a notification through ParentSquare but acknowledged that people outside the Rye Neck school community also received the phishing email.
“We realize some non-Rye Neck parents and community members received the email, as well,” the district said.
The district apologized for any concern or inconvenience caused by the compromised accounts.
“Protecting the security and privacy of our school community remains our top priority,” Rye Neck Schools said.
This article was prepared with the assistance of AI tools under the direction and editing of Robert Cox.
Have information about this story? Email robertcox@talkofthesound (preferred) or contact via WhatsApp: +353 089 972 0669.