Parent Pulse: Weekly Radar
September 14 – 19, 2026 | Digital Youth Culture & Safety Report
Springfield, Massachusetts went back to school Monday. On Tuesday evening the FBI told the district its data was gone — student addresses, ages, ethnicities and medical information among it — and a ransomware gang says it has the files. So far the credit monitoring is for staff. Plus the thirteen California laws we missed by hours, the survey that says the phone bans slipped while parents weren't looking, and the correction we owe you on Meta.
🔄 A correction on Meta's New Mexico appeal
For two weeks we said nobody had reported whether Meta filed its appeal of New Mexico's $942 million judgment by the deadline. That premise was stale. On Wednesday, September 9 — the day before we recorded last week — the Santa Fe New Mexican reported that Meta had filed more than a dozen post-judgment motions on September 4, asking Judge Bryan Biedscheid to amend nearly all of his findings, cut the $567 million abatement fund to about $60 million, or grant a new trial. Motions like that keep the 30-day appeal clock from running until they are decided.
So there was no deadline to miss, there is no appeal yet, and there won't be one until the judge rules — and he “has yet to rule on or set hearings on any of Meta's new filings.” We said we didn't know. The answer was in a newspaper. We missed it.
This report discusses a school data breach, an AI-generated school threat, and a law named for a teenager who died by suicide. If you or your child are struggling, the 988 Suicide & Crisis Lifeline is free, confidential and available 24/7 — call or text 988.
🔖 A note on this week's sourcing
Springfield is from NEPM, WAMC, GBH, WBUR, Western Mass News and Insurance Journal (September 14–16) and the ransomware.live tracker's copy of the Interlock leak-site posting. The California laws are from the Governor's release and the chaptered bill texts at leginfo.legislature.ca.gov. The survey is Brookings / USC CARE. West Haven is NBC Connecticut and WFSB. Officials have not said “ransomware”; the gang's claim is reported as a claim.
On process: for two weeks our research pipeline dropped real stories before verification. This week it found everything — and its summary still got two things wrong, the Meta motions and the Interlock claim. Its own fact-checkers caught both. A system being right one week is not the same thing as a system you can stop checking.
Listen to this week
Episode published 2026-09-21 · 21 min
The FBI Confirmed It: A School District's Student Data Was Stolen
Get this in your inbox every week
One email a week. The week's findings, sourced, in plain language. No spam, unsubscribe any time.
The ugly: Springfield, part two — the data was taken
Springfield Public Schools, MA · students returned Monday, September 14 · FBI notice Tuesday, September 15 · reported Wednesday, September 16
Springfield Public Schools — the second-largest district in Massachusetts, 66 schools, about 27,000 students — lost the entire week of September 8–11 to what it called a “Level 4 severe cyber incident.” The systems that went dark included the platforms holding student medical and transportation records; the nurses could not see medications or allergies.
Monday, September 14: students went back. Superintendent Dr. Sonia Dinnall called it their “second first day of school.” Phone lines had been restored by Friday; backup internet was up in most buildings; the primary internet system was still offline. Teachers taught from books, paper and overhead projectors. The four lost days will be made up by shortening December break. That same Monday, Assistant Superintendent Jose Escribano said: “So, we're not saying that any information was compromised at this time. We're still obviously investigating the scope of it.”
Tuesday evening, September 15: the FBI told the district its data had been breached by a cybercriminal organization.
| Whose data | What the district said may be in the files |
|---|---|
| Staff | Social Security numbers — “it is possible … though that is not confirmed” |
| Students | “addresses, ages, ethnicities, medical information and more” — student SSNs are “not common practice” to store in those files |
What the district is doing: expediting free credit monitoring for all district personnel. As of Wednesday, September 16, nothing had been announced for students — whose addresses, ages and medical information are the ones on the list. Superintendent Dinnall: “Springfield Public Schools just happened to be in the crosshairs of these criminals.” And: “In this day and age, we all should be hyper vigilant around our personal identifying information.”
The claim officials have not made — and a ransomware gang has
No official has confirmed a ransom demand, and no official has named the group. Mayor Domenic Sarno has said he will not negotiate a ransom, which is not the same as saying one was made. But on Tuesday afternoon, September 15, the Interlock ransomware gang — the subject of a joint FBI/CISA advisory in July 2025 — posted “Springfield Public Schools” on its dark-web leak site. The ransomware.live tracker logged the entry at 2:58 p.m. Eastern.
That matches, almost field for field, what the district disclosed the next day. No local outlet has reported the claim. The district has not confirmed it. We cannot verify what the gang actually holds. So here is the precise version: officials have not said ransomware. A ransomware group has said Springfield.
The Cat in the Hat did not stop
The AI-generated “Cat in the Hat” threat trend that had put more than ten kids in handcuffs by last week produced at least one more arrest. On Monday, September 14, an eighth grader at Bailey Middle School in West Haven, Connecticut was arrested over a TikTok post from the weekend. Police called it a hoax and posted two extra units at the school anyway. The charge is breach of peace — the low end of a range that, across the trend, runs from harassment (Colorado) to threats of mass violence (Tennessee, Ohio) to terroristic threats (Alabama) to terrorism (Mississippi). The charge depends on the state and the wording, and the kid does not get to pick.
The good: California wrote it down
Signed Thursday, September 10, 2026 · Marin County · signed, not in force
On the day we recorded last week's episode, Governor Gavin Newsom signed 13 kids-and-tech bills. His framing: “Parents can't compete. Can't compete with the engineering, can't compete with the algorithms. You feel like you're a lousy parent.” The four that matter most, from the chaptered bill texts:
| Bill | What it does | When |
|---|---|---|
| AB 1709 Lowenthal | “A covered platform shall not provide an addictive feature to a user who is under 16 years of age.” An addictive feature is an addictive feed — media recommended based on information associated with you — or autoplay, plus anything the Attorney General adds by regulation. An under-16 account is allowed; the feed is not. Enforcement only by the AG or a local prosecutor: $50,000 per affected minor (knowing), $25,000 (negligent). Creates a seven-member e-Safety Advisory Commission. | No operative clause, so January 1, 2027 by California's default rule — unless a court stops it. The EFF called it “well-intentioned, but deeply flawed.” NetChoice, which sued over SB 976 (upheld by the Ninth Circuit in September 2025), is expected to sue. |
| SB 1119 “Adam's Law” Padilla | Named for Adam Raine. For a user the operator knows is a child, a companion chatbot must cap a single session at one hour and total daily use at two hours; keep a documented crisis response protocol; notify a parent “as soon as practicable” of a credible imminent threat; perform a risk assessment before deployment; and pass an independent child safety audit by January 1, 2029, then every two years. A child or guardian can sue for actual damages and attorney's fees. Passed the Senate 39–0. OpenAI supported it. | “This section shall become operative July 1, 2027.” |
| AB 2 Lowenthal | A platform with over $100 million in annual revenue that fails to exercise ordinary care and injures a child is liable for $5,000 per violation up to $1,000,000 per child, or three times actual damages, whichever is greater. | Sunsets January 1, 2035. |
| SB 867 Padilla | A four-year moratorium on companion-chatbot toys for children under 16. | — |
The other nine cover age-verification signals, CSAM reporting (including AI imagery), student data, digital-wellness instruction, school devices and computer-science standards.
The part every headline skipped: none of it is in force today. Adam's Law says so in its own text. AB 1709 starts January 1, 2027 unless a court intervenes. All of it applies to California residents. If you live in Alabama, or Ohio, or anywhere else, nothing on your kid's phone changed on Thursday.
Why it's still the good: for the first time, a state wrote down the numbers. One hour a session. Two hours a day. No feed under sixteen. You don't have to wait for July to use them.
The bad: the phone ban slipped
Brookings / USC Center for Applied Research in Education · published Thursday, September 10 (the day before our window; we label it) · Understanding America Study teen panel, October 2025 and May 2026
A year after most schools restricted phones for the first time, Dan Silver, Amie Rapaport and Morgan Polikoff asked the same nationally representative panel of teens twice — a probability panel, not an online poll — and asked the adults in the same households in parallel.
| October 2025 | May 2026 | |
|---|---|---|
| Teens who used a phone during a core class | 28% | 42% |
| — at bell-to-bell schools (56% of teens) | 25% | 35% |
| — at schools with looser rules (44%) | 32% | 50% |
| Teens who say the phone rules make them unhappy | 48% | 27% |
- 44% of teens said their teachers got less strict about the phone rules as the year went on. 13% of the adults in their homes noticed. The kids watched it slip. We didn't.
- The kids got happier about the rules anyway. One wrote: “I was able to pay more attention this school year since our phones were locked in pouches. There were less distractions.” The resistance faded, and the enforcement faded with it.
- Outside school: 58% said the school rule had no effect on their phone use, 12% used their phone less, and 30% used it more than they otherwise would.
Caveats: descriptive, self-reported, and the authors say plainly they cannot know why enforcement decreased. But the direction is not ambiguous. The policy held. The enforcement didn't.
The rivals: silent a third week, with a caveat
Meta's newsroom, checked through Thursday, carried nothing on the New Mexico judgment, no Teen Accounts milestone, and no reply from TikTok, YouTube or Snap to Meta's August 26 open letter. The only teen-safety item in the window was Threads parental supervision (September 15) — daily limits, a 10 PM–7 AM sleep mode, tagging and privacy controls — launching in Asia-Pacific countries only, no US date.
Separately, Google said (September 14) it would begin rolling out AI age estimation on Google and YouTube accounts in Canada. Neither is here.
Honesty note: TikTok's newsroom would not fully load for our tools, so we are not claiming to have read it. And the FTC's companion-chatbot inquiry turned one year old on September 11 with no report.
The Decoder Ring: five terms, none of them slang
Eighth week in a row with no verifiably new slang. Five terms that will actually matter to you this month:
- Addictive feature — California's new legal term (AB 1709): an algorithmic feed built from what your kid has watched, or autoplay. When your kid says “the algorithm,” this is it, and a state just put it in a statute.
- Operative date — the day a signed law actually starts applying. Adam's Law: July 1, 2027. AB 1709: January 1, 2027 by default. Signed is not in force.
- Breach of peace — the West Haven charge, the low end of a range that runs to terrorism. The kid doesn't get to pick.
- Credit freeze — a lock on a credit file that blocks new accounts. Not monitoring, which only tells you afterward. Free at Equifax, Experian and TransUnion; a parent can do it for a minor.
- Bell-to-bell — phones off and away from the first bell to the last, lunch and passing periods included. It slid ten points instead of eighteen. Better is not the same as held.
Your weekly action plan
1. Freeze your kid's credit this weekend.
Not just for Springfield. Go to Equifax, Experian and TransUnion, find the page for a minor's credit freeze, and follow it — you'll need proof you're the parent and proof of the child's identity. Free, one evening, and it stays until you lift it. If your district has had a breach, add one step: ask in writing which student fields were in the files and whether students are offered monitoring, not just staff.
2. Ask the teacher, not the district.
The policy is on the website; the enforcement is in the room. One question at conferences: “Is the phone rule enforced in your class today the way it was in September?” Ask your kid the same thing on the drive home. 44% of teens saw it slip; 13% of parents noticed. Be in the 13.
3. Use California's numbers tonight, wherever you live.
One hour a session, two hours a day, on any companion chatbot. Screen Time (iPhone) and Family Link (Android) both set a daily limit per app — set it on ChatGPT, Character.AI, Replika, whatever your kid actually uses. Turn off autoplay wherever the app allows it. California companies have until July 2027. You have until bedtime.
4. Say the three don'ts.
Don't post, don't repost, don't comment. Tell an adult. Sgt. Allard's line works for the Cat in the Hat and for whatever comes next. Keep last week's three sentences too: AI-made is still real; Snapchat doesn't disappear; tell me, and I won't be mad you saw it.
What we did not check this week
We check five categories every week, and we tell you when we come up short.
- The New Mexico docket itself. The motions story rests on one outlet, the Santa Fe New Mexican; the state has not filed its response.
- What Interlock actually holds. We saw the tracker's copy of the leak-site description, not the data.
- Breach trackers beyond Springfield. Not swept.
- New peer-reviewed research in the window. None found. The Brookings piece is a survey brief dated September 10.
- TikTok's newsroom. See above.
- The other nine California bills. Described from the Governor's release and CalMatters, not the bill texts.
- Slang. Eighth week. A targeted search returned only evergreen guides recycling last year's terms.