ÌÇÐ͝Âþvlog

Privacy & Security

How Can Schools Reduce the Risk of Cyberattacks?

By Lauraine Langreo — December 13, 2022 2 min read
Silhouette of a hacker in a hoodie using laptop with binary code overlay.
  • Save to favorites
  • Print
Email Copy URL

Cyberattacks are now a daily threat for K-12 schools and the problem could get worse as ÌÇÐ͝Âþvlog lean further into technology use for teaching and learning, and as hackers grow more sophisticated.

, a nonprofit focused on helping schools prevent cyberattacks, found that there have been more than 1,330 publicly disclosed attacks since 2016, when the organization first began tracking these incidents. Hackers have targeted districts of all sizes.

Most notably, in 2022, two big districts—Los Angeles Unified and New York City—faced cybersecurity challenges. And if it the biggest districts can fall victim, anyone can, experts say. In fact, smaller districts are particularly vulnerable because they often do not have the cybersecurity resources they need to protect themselves.

Cyberattacks are costly to school districts. A recent GAO report found that, on average, districts lose three days to three weeks of instructional time after an attack and that recovery time could range from two to nine months. So districts should make sure they’re securing their networks to avoid unnecessary costs.

Education Week has extensive coverage that addresses the question of what to do when your school or district is hit with a cyberattack and what to do to prevent attacks. Here is a collection of articles and videos Education Week has published on this topic that you could use to tackle this challenge.


What you need to know about school cyberattacks

Image shows a glowing futuristic background with lock on digital integrated circuit.

In this explainer, we lay out what ÌÇÐ͝Âþvlog need to know about the most common cyberattacks, such as ransomware and denial-of-service attacks, and why hackers target K-12 schools. (Spoiler alert: It’s because schools have access to so much data.)


Should districts pay a ransomware demand?

Illustration of an open laptop with a red envelope attached to a fishing hook.

Guidance from the FBI and the Cybersecurity and Infrastructure Security Agency discourages paying the ransom because it doesn’t guarantee that the data hackers are holding ransom will be decrypted or that the systems will no longer be compromised. But despite that guidance, the question of whether or not to pay ransom does not always have a simple answer.

Two district leaders also talked to Education Week about how they responded to a ransomware attack that closed schools for two days.


Tips on curbing cyberattacks

There’s no magic formula that will completely protect districts from cyberattacks, but there are ways to reduce the risks. In this special report, K-12 technology leaders and experts offer recommendations on how to prevent these incidents, especially with the proliferation of school-issued devices, and what the top cybersecurity priorities should be for districts. This outlines ways to prevent costly cyberattacks.


Protecting student data should be paramount

Illustration of numerous computer windows overlapping with creepy eyeballs inside the close, open, and minimize circles within the various window screens.

Student data privacy encompasses a broad range of considerations, from students’ own smartphones, to classroom applications discovered and embraced by teachers, to district-level data systems, to state testing programs. Experts weigh in on why schools struggle to protect student data.

You can also quiz yourself on how much you know about protecting student data.

Events

College & Workforce Readiness Webinar How High Schools Can Prepare Students for College and Career
Explore how schools are reimagining high school with hands-on learning that prepares students for both college and career success.
This content is provided by our sponsor. It is not written by and does not necessarily reflect the views of Education Week's editorial staff.
Sponsor
School Climate & Safety Webinar
GoGuardian and Google: Proactive AI Safety in Schools
Learn how to safely adopt innovative AI tools while maintaining support for student well-being. 
Content provided by 
Reading & Literacy K-12 Essentials Forum Supporting Struggling Readers in Middle and High School
Join this free virtual event to learn more about policy, data, research, and experiences around supporting older students who struggle to read.

EdWeek Top School Jobs

Teacher Jobs
Search over ten thousand teaching jobs nationwide — elementary, middle, high school and more.
Principal Jobs
Find hundreds of jobs for principals, assistant principals, and other school leadership roles.
Administrator Jobs
Over a thousand district-level jobs: superintendents, directors, more.
Support Staff Jobs
Search thousands of jobs, from paraprofessionals to counselors and more.

Read Next

This content is provided by our sponsor. It is not written by and does not necessarily reflect the views of Education Week's editorial staff.
Sponsor
Privacy & Security Quiz
Quiz Yourself: How Much Do You Know About Cybersecurity?
Answer 5 questions to assess your knowledge on cybersecurity.
Content provided by 
Privacy & Security 'There Are So Many Issues’: Why Schools Are Struggling to Protect Student Data
While efforts have been made to protect student data, there are still troubling examples of data breaches.
8 min read
Illustration of numerous computer windows overlapping with creepy eyeballs inside the close, open, and minimize circles within the various window screens.
Daniel Hertzberg for Education Week
Privacy & Security Download Be Ready When Parents Ask These 7 Questions About Data Privacy
These questions offer a roadmap for issues that K-12 leaders should be prepared to discuss.
1 min read
Data security and privacy concept. Visualization of personal or business information safety.
iStock/Getty Images Plus
Privacy & Security Cyber Hackers Attack Schools More Often Than You Think: 8 Ways to Stop Them
Experts say there’s no magic formula for districts to completely protect themselves from these incidents, but there are ways to reduce risk.
1 min read
Image of a red glowing caution sign over a dark field of data.
Getty