Campus Alert Archive
NECC

A Weekend Cyberattack Shut Northern Essex Community College for Five Days and Left Data Exposure Questions Unanswered

MAotheradvisorymedium confidence
Confirmed Threat

On Sunday, March 5, 2023, Northern Essex Community College first detected unauthorized access to its network and issued an alert describing 'a likely cyberattack,' forcing the closure of its Haverhill and Lawrence campuses for at least five consecutive days. The college worked with law enforcement and cybersecurity experts throughout the week; campuses reopened Wednesday, March 8, 2023, though officials said they could not confirm whether student or employee data had been compromised.

Alerts
3
Response
—
Killed
—
Injured
—
Institution
Northern Essex Community College
Community College · MA
~7,000 studentsNECC Alert
Confirmed Timeline

Alert Sequence

3 messages in sequence

Some alert texts below are approximate reconstructions from news coverage, not confirmed verbatim transcripts. Reconstructed texts are shown in italic with a dashed border. Verified verbatim texts have a solid border and are marked accordingly.

INITIAL ALERTSMS
Approximate reconstruction223 chars
NECC Alert: Due to a likely cyberattack causing a network interruption issue, both the Haverhill and Lawrence campuses will be closed Monday, March 6. All in-person classes and activities are cancelled. Updates will follow.

This text has been reconstructed from news coverage and may not reflect the exact original wording.

Reconstructed: WHAV radio reported that NECC issued a text message alert on Sunday afternoon, March 5, 2023, reporting 'a likely cyberattack' and a 'network interruption issue' -- both phrases were quoted in news coverage.
The college used the phrase 'likely cyberattack' in the initial public text alert -- an unusually candid characterization compared to institutions that initially describe such incidents as 'technical difficulties.'
UPDATEEmail
Approximate reconstruction344 chars
NECC Update: Both the Haverhill and Lawrence campuses remain closed as we continue to investigate the network interruption. We are working closely with law enforcement and cybersecurity experts to conduct a full systems audit. We do not have evidence of any personal data being compromised. We will communicate updates as they become available.

This text has been reconstructed from news coverage and may not reflect the exact original wording.

Reconstructed: The Record and CBS Boston both quoted a college spokesperson stating they were working with law enforcement and cybersecurity experts and had 'no evidence of any personal data being compromised' -- standard but carefully hedged breach language.
Extended multi-day closure of both campuses (Haverhill and Lawrence) during a cybersecurity investigation is a significant operational disruption for a 7,000-student community college serving a low-income, minority-majority population.
ALL CLEAREmail
Approximate reconstruction298 chars
NECC Update: After working closely with law enforcement and cybersecurity experts, we are pleased to announce that both the Haverhill and Lawrence campuses will reopen Wednesday, March 8. Classes resume on a normal schedule. We continue to monitor our systems and will provide updates if warranted.

This text has been reconstructed from news coverage and may not reflect the exact original wording.

Reconstructed: The Eagle Tribune and Inside Higher Ed both reported that NECC announced a Wednesday reopening after five days of closure -- the full-week disruption at the start of a spring semester week reflects the severity of the network interruption.
The reopening announcement is not a traditional all-clear (no physical threat was lifted) but serves the same function -- it restores normal operations and ends the protective closure.
Context

Background

Northern Essex Community College (NECC) operates two campuses in northeastern Massachusetts -- the main campus in Haverhill and a satellite in Lawrence -- serving approximately 7,000 students, a majority of whom are first-generation college students, immigrants, and low-income residents of the Merrimack Valley. On March 1, 2023, NECC first became aware of unauthorized access to its computer network; on Sunday afternoon, March 5, the college issued an alert to students and staff describing 'a likely cyberattack' causing a 'network interruption issue,' and closed both campuses Monday. The college remained closed for five consecutive days, from Monday March 6 through Tuesday March 7, before reopening Wednesday March 8 after working with law enforcement and cybersecurity experts. Officials stated they found no evidence that student or employee personal data was compromised but could not rule it out, and declined to confirm whether the attack involved ransomware. The NECC Observer student newspaper covered the disruption extensively. NECC was one of several Massachusetts educational institutions targeted by cyberattacks in the 2022-2023 academic year, fitting a broader national pattern of ransomware and intrusion attacks on community colleges.
Analysis

Key Findings

NECC used the phrase 'likely cyberattack' in its initial public alert -- an unusually direct characterization at a time when many institutions obscure cyber incidents as 'technical difficulties'
A five-day campus closure at a community college serving low-income commuter students creates compounded harms -- lost class time, disrupted childcare and work schedules, and delayed access to financial aid and support services
NECC's attack fit a pattern of ransomware and intrusion campaigns targeting community colleges in Massachusetts and across the US in 2022-2023
The college's data-breach communication -- 'no evidence of compromise' but without a definitive answer -- reflects the inherent difficulty of rapid forensic assurance in complex cyberattacks
Outcome
NECC campuses reopened Wednesday March 8 after a five-day closure. Cybersecurity experts and law enforcement were engaged. College stated they found no evidence of personal data compromise but could not rule it out. Attack type (ransomware vs. other) was not publicly confirmed.
Provenance

Sources

  1. News
    'Likely Cyberattack' Interrupts Northern Essex Community College Network - WHAV
    whav.net
  2. News
    Northern Essex Community College closed for 5th day due to cyberattack - Boston.com
    boston.com
  3. News
    Northern Essex Community College remains shuttered after cyberattack - The Record
    therecord.media
  4. News
    Northern Essex Community College latest Massachusetts school targeted in cyberattack - CBS Boston
    cbsnews.com
  5. News
    NECC to reopen Wednesday after cyber attack - Eagle Tribune
    eagletribune.com
  6. Student Paper
    NECC hit by cyberattack - NECC Observer
    observer.necc.mass.edu
Tags
cyberattackransomwarecampus-closurecommunity-collegemassachusettshaverhilllawrencemerrimack-valleydata-breachfive-day-closure
Added May 2026Updated May 2026Via ingestion