20/03/2026
😱
At 2:14 AM, the attendance server at San Isidro Elementary School recorded a successful tap-in from classroom terminal B.
The timestamp was logged on August 17, 2021, in Bacolod City, Philippines. San Isidro had been shut down since Typhoon Yolanda damage assessments in 2012, and the remaining classrooms had never been reopened. The property was fenced, disconnected from public power, and listed as inactive under the city education office. Terminal B was one of six classroom devices documented as nonfunctional during the final inventory.
A private security contractor patrolling the adjacent warehouse lot noted a faint light inside the west corridor at 2:19 AM. His body camera showed the school compound gate still chained from the outside. He reported no movement, no vehicles, and no audible activity from the main building. The light was gone by the time he reached the outer wall.
At 2:26 AM, a maintenance alert was automatically emailed to the old district IT distribution list. The alert identified a successful RFID attendance scan assigned to a Grade 4 student whose file status had been marked transferred in 2011. The student ID number was valid, but the physical card had been destroyed along with other archived cards during a 2014 disposal audit. The system also logged a temperature reading from the terminal at 31.8°C, suggesting the unit had powered on briefly.
City engineering staff entered the building later that morning at 9:43 AM. The corridor was dry, dusty, and showed no fresh footprints. Terminal B was still mounted to the wall, its casing cracked and its power adapter missing. The wiring behind it had been cut years earlier and sealed during a hazard inspection.
A review of nearby CCTV from a fuel station across the street showed no one entering or leaving the school grounds between 1:30 AM and 3:00 AM. A tricycle passed at 2:11 AM, and a delivery van crossed the frame at 2:23 AM, but neither stopped. The school’s own cameras had been removed in 2016 after repeated copper theft. No other visual record from the property existed.
The district’s archived server image was later restored for analysis. Investigators confirmed the log entry had been created locally, not inserted later from a remote device. The same server also generated a second, incomplete record at 2:14:07 AM with no student name, no classroom number, and no matching device ID. That unfinished entry ended with a field label that district software had never used: “guardian present”.
The property was demolished in March 2023. The attendance record remains in the district archive under Case File EDU-BCD-21-0817, status Unresolved. Terminal B never operated again, and no one was able to explain how it produced a local scan from a disconnected wall unit inside a sealed school.
