In this case, they are saying that, “when someone got access to the school’s computer network” and, “There is still an investigation and no further information has been provided.” This makes it sound like it wasn’t a case of phishing, but it’s not definitive.
Erich Kron is the Security Awareness Advocate at KnowBe4, and has over 20 years’ experience in the medical, aerospace manufacturing and defense fields. He is the former security manager for the US Army 2nd Regional Cyber Center-Western Hemisphere.