Reply to post:

I wonder if this has anything to do with the massive uptick we've seen in infected Word docs and PDFs trying to come in over the last month. So massive, in fact, that we started quarantining all Word docs and PDFs coming in from outside our domain as dealing with the ones that needed to be released was taking less effort than dealing with the ones that somehow slipped past all our filters. I've been working under the assumption that we were being targeted (though I couldn't figure out why anyone would make that sort of effort to break into a school district's systems), but if there's been a major campaign going on maybe not.