Ķvlog

Privacy & Security

How Can Schools Reduce the Risk of Cyberattacks?

By Lauraine Langreo — December 13, 2022 2 min read
Silhouette of a hacker in a hoodie using laptop with binary code overlay.
  • Save to favorites
  • Print
Email Copy URL

Cyberattacks are now a daily threat for K-12 schools and the problem could get worse as Ķvlog lean further into technology use for teaching and learning, and as hackers grow more sophisticated.

, a nonprofit focused on helping schools prevent cyberattacks, found that there have been more than 1,330 publicly disclosed attacks since 2016, when the organization first began tracking these incidents. Hackers have targeted districts of all sizes.

Most notably, in 2022, two big districts—Los Angeles Unified and New York City—faced cybersecurity challenges. And if it the biggest districts can fall victim, anyone can, experts say. In fact, smaller districts are particularly vulnerable because they often do not have the cybersecurity resources they need to protect themselves.

Cyberattacks are costly to school districts. A recent GAO report found that, on average, districts lose three days to three weeks of instructional time after an attack and that recovery time could range from two to nine months. So districts should make sure they’re securing their networks to avoid unnecessary costs.

Education Week has extensive coverage that addresses the question of what to do when your school or district is hit with a cyberattack and what to do to prevent attacks. Here is a collection of articles and videos Education Week has published on this topic that you could use to tackle this challenge.


What you need to know about school cyberattacks

Image shows a glowing futuristic background with lock on digital integrated circuit.

In this explainer, we lay out what Ķvlog need to know about the most common cyberattacks, such as ransomware and denial-of-service attacks, and why hackers target K-12 schools. (Spoiler alert: It’s because schools have access to so much data.)


Should districts pay a ransomware demand?

Illustration of an open laptop with a red envelope attached to a fishing hook.

Guidance from the FBI and the Cybersecurity and Infrastructure Security Agency discourages paying the ransom because it doesn’t guarantee that the data hackers are holding ransom will be decrypted or that the systems will no longer be compromised. But despite that guidance, the question of whether or not to pay ransom does not always have a simple answer.

Two district leaders also talked to Education Week about how they responded to a ransomware attack that closed schools for two days.


Tips on curbing cyberattacks

There’s no magic formula that will completely protect districts from cyberattacks, but there are ways to reduce the risks. In this special report, K-12 technology leaders and experts offer recommendations on how to prevent these incidents, especially with the proliferation of school-issued devices, and what the top cybersecurity priorities should be for districts. This outlines ways to prevent costly cyberattacks.


Protecting student data should be paramount

Illustration of numerous computer windows overlapping with creepy eyeballs inside the close, open, and minimize circles within the various window screens.

Student data privacy encompasses a broad range of considerations, from students’ own smartphones, to classroom applications discovered and embraced by teachers, to district-level data systems, to state testing programs. Experts weigh in on why schools struggle to protect student data.

You can also quiz yourself on how much you know about protecting student data.

Events

College & Workforce Readiness Webinar How High Schools Can Prepare Students for College and Career
Explore how schools are reimagining high school with hands-on learning that prepares students for both college and career success.
This content is provided by our sponsor. It is not written by and does not necessarily reflect the views of Education Week's editorial staff.
Sponsor
School Climate & Safety Webinar
GoGuardian and Google: Proactive AI Safety in Schools
Learn how to safely adopt innovative AI tools while maintaining support for student well-being. 
Content provided by 
Reading & Literacy K-12 Essentials Forum Supporting Struggling Readers in Middle and High School
Join this free virtual event to learn more about policy, data, research, and experiences around supporting older students who struggle to read.

EdWeek Top School Jobs

Teacher Jobs
Search over ten thousand teaching jobs nationwide — elementary, middle, high school and more.
Principal Jobs
Find hundreds of jobs for principals, assistant principals, and other school leadership roles.
Administrator Jobs
Over a thousand district-level jobs: superintendents, directors, more.
Support Staff Jobs
Search thousands of jobs, from paraprofessionals to counselors and more.

Read Next

Privacy & Security We Need More Money to Prevent Cyberattacks, School Districts Tell Feds
District leaders point to the massive cyberattack on the Los Angeles schools as reason to act now.
2 min read
Image of a security symbol on a laptop.
filo/DigitalVision Vectors
Privacy & Security Seesaw, Digital Platform Used by Schools, Compromised With ‘Inappropriate Image’
“You would think a platform with thousands of minors would have better security,” one parent tweeted.
Molly Guthrey, Pioneer Press
2 min read
Image of lock on binary code background.
DigitalVision Vectors/Getty
Privacy & Security Cybersecurity a Top Ed-Tech Priority for States, But Funding Lags
Only 8 percent in a survey of state ed-tech leaders said their state provides “ample” funding for cybersecurity.
3 min read
 abstract digital key with technology interface, cybersecurity, key, lock, cellphone, fingerprint, and cloud computing icons
As schools increasingly turn to technology, the risk of cyberattacks have also grown.
iStock/Getty Images Plus
Privacy & Security Why the Los Angeles Cyberattack Is a Wake-Up Call for Every School District
A massive cyberattack shut off access to email and crippled the district’s website and systems used for teaching and attendance.
5 min read
Hacker attack and data breach, information leak and cybersecurity concept.
iStock/Getty Images Plus