ÌÇÐ͝Âþvlog

Privacy & Security

How Can Schools Reduce the Risk of Cyberattacks?

By Lauraine Langreo — December 13, 2022 2 min read
Silhouette of a hacker in a hoodie using laptop with binary code overlay.
  • Save to favorites
  • Print
Email Copy URL

Cyberattacks are now a daily threat for K-12 schools and the problem could get worse as ÌÇÐ͝Âþvlog lean further into technology use for teaching and learning, and as hackers grow more sophisticated.

, a nonprofit focused on helping schools prevent cyberattacks, found that there have been more than 1,330 publicly disclosed attacks since 2016, when the organization first began tracking these incidents. Hackers have targeted districts of all sizes.

Most notably, in 2022, two big districts—Los Angeles Unified and New York City—faced cybersecurity challenges. And if it the biggest districts can fall victim, anyone can, experts say. In fact, smaller districts are particularly vulnerable because they often do not have the cybersecurity resources they need to protect themselves.

Cyberattacks are costly to school districts. A recent GAO report found that, on average, districts lose three days to three weeks of instructional time after an attack and that recovery time could range from two to nine months. So districts should make sure they’re securing their networks to avoid unnecessary costs.

Education Week has extensive coverage that addresses the question of what to do when your school or district is hit with a cyberattack and what to do to prevent attacks. Here is a collection of articles and videos Education Week has published on this topic that you could use to tackle this challenge.


What you need to know about school cyberattacks

Image shows a glowing futuristic background with lock on digital integrated circuit.

In this explainer, we lay out what ÌÇÐ͝Âþvlog need to know about the most common cyberattacks, such as ransomware and denial-of-service attacks, and why hackers target K-12 schools. (Spoiler alert: It’s because schools have access to so much data.)


Should districts pay a ransomware demand?

Illustration of an open laptop with a red envelope attached to a fishing hook.

Guidance from the FBI and the Cybersecurity and Infrastructure Security Agency discourages paying the ransom because it doesn’t guarantee that the data hackers are holding ransom will be decrypted or that the systems will no longer be compromised. But despite that guidance, the question of whether or not to pay ransom does not always have a simple answer.

Two district leaders also talked to Education Week about how they responded to a ransomware attack that closed schools for two days.


Tips on curbing cyberattacks

There’s no magic formula that will completely protect districts from cyberattacks, but there are ways to reduce the risks. In this special report, K-12 technology leaders and experts offer recommendations on how to prevent these incidents, especially with the proliferation of school-issued devices, and what the top cybersecurity priorities should be for districts. This outlines ways to prevent costly cyberattacks.


Protecting student data should be paramount

Illustration of numerous computer windows overlapping with creepy eyeballs inside the close, open, and minimize circles within the various window screens.

Student data privacy encompasses a broad range of considerations, from students’ own smartphones, to classroom applications discovered and embraced by teachers, to district-level data systems, to state testing programs. Experts weigh in on why schools struggle to protect student data.

You can also quiz yourself on how much you know about protecting student data.

Events

College & Workforce Readiness Webinar How High Schools Can Prepare Students for College and Career
Explore how schools are reimagining high school with hands-on learning that prepares students for both college and career success.
This content is provided by our sponsor. It is not written by and does not necessarily reflect the views of Education Week's editorial staff.
Sponsor
School Climate & Safety Webinar
GoGuardian and Google: Proactive AI Safety in Schools
Learn how to safely adopt innovative AI tools while maintaining support for student well-being. 
Content provided by 
Reading & Literacy K-12 Essentials Forum Supporting Struggling Readers in Middle and High School
Join this free virtual event to learn more about policy, data, research, and experiences around supporting older students who struggle to read.

EdWeek Top School Jobs

Teacher Jobs
Search over ten thousand teaching jobs nationwide — elementary, middle, high school and more.
Principal Jobs
Find hundreds of jobs for principals, assistant principals, and other school leadership roles.
Administrator Jobs
Over a thousand district-level jobs: superintendents, directors, more.
Support Staff Jobs
Search thousands of jobs, from paraprofessionals to counselors and more.

Read Next

Privacy & Security What Schools Should Know About the PowerSchool Data Breach
The company this week notified districts of a hack that occurred Dec. 28.
6 min read
Data security and privacy concept. Visualization of personal or business information safety.
iStock/Getty Images Plus
Privacy & Security Districts Flood FCC With Requests for New Cybersecurity Funds
The demand comes as the education sector's risk for cyberattacks continues to rise.
4 min read
Illustrations of man be scammed online with fishing line.
Digital Vision Vectors
Privacy & Security What Teachers Need to Know About Changes to Instagram Teen Accounts
The adjustments come as Meta faces multiple lawsuits from states and school districts.
4 min read
Close up photo of Black teen looking at Instagram photos on her cellphone.
Anastasia_Prish/Getty
Privacy & Security Download A Tip Sheet to Help Teachers Prevent and Respond to Doxxing
Teachers can be a target for malicious actors. Use this tip sheet to prevent and respond to doxxing.
1 min read
Image of digital safety against doxxing and privacy invasion.
Laura Baker/Education Week via Canva