Schools Across the US Grappling with Alarming Rise in Cybersecurity Threats
In recent years, schools across the United States have been plagued by a significant increase in cybersecurity threats. Experts are now urging transparency to prevent further breaches and calling for proactive measures to safeguard student data and prevent costly disruptions to learning.
Richard Rossi, New Hampshire’s cybersecurity advisor, highlighted the need for increased awareness and action, stating, If someone broke into a classroom and stole all their computers and switches and other technology, law enforcement would be notified and that would be on the front page. But when we have a cyberattack of the same magnitude, that’s often swept under the rug.
Experts believe that the actual number of cybersecurity attacks is likely much higher than the reported cases due to fear of consequences among school district employees, including the risk of job loss or scrutiny. U.S. Senator Maggie Hassan emphasized this point during a Senate Homeland Security subcommittee meeting, stating, The actual number of cybersecurity attacks is likely significantly higher than what’s publicly reported because schools and other victims of cyber attacks fear the consequences of reporting cybersecurity incidents.
The impact of a cybersecurity breach on a school can be severe and traumatic for students. Not only does it expose their sensitive data, but it also disrupts their learning. According to a report from the Government Accountability Office, students can lose anywhere from three days to three weeks of learning time as a result of such attacks. Additionally, the costs associated with resolving these breaches can be substantial, often surpassing $1 million for school districts.
Pamela McLeod, founder of the New Hampshire Chief Technology Officers Council and the N.H. Student Privacy Alliance, highlighted the financial strain schools face after a breach, stating, It often costs school districts more than $1 million to bring in outside cybersecurity experts, restore computers and networks, and secure their system after a breach.
Several recent incidents in New Hampshire serve as alarming examples of the escalating cybersecurity threats faced by schools. The Concord school district suffered a major breach in 2016, compromising the data privacy of all staff members after attackers obtained W2 forms. Similarly, Nashua’s school district fell victim to a sophisticated attack in April, raising concerns about the potential compromise of sensitive information.
Amidst the rising threats, cybersecurity experts are urging school districts to take proactive steps in preventing breaches and emphasize the importance of reporting cybercrime incidents when they occur. Efforts are already underway to allocate new state and federal funding towards strengthening cybersecurity measures.
New Hampshire has received $2.5 million in federal funds for the State and Local Cybersecurity Grant Program, with the possibility of obtaining an additional $10 million over the next four years. These funds are intended to support cybersecurity initiatives across the state, including local governments and school districts.
To address vulnerabilities, the state is implementing various programs. One such initiative involves distributing hardware tokens, which provide multifactor authentication for school districts, making it more challenging for hackers to gain unauthorized access. Additionally, the state is investing $1 million to migrate school and municipal websites to the secure .gov domain, offering enhanced protection against spoofing and cyber threats.
Recognizing the importance of education and preparedness, the state has allocated $100,000 for a security training course that local government IT employees can attend free of charge. The goal is to equip employees with the necessary skills and knowledge to combat cyber threats effectively.
In response to the growing concerns, cybersecurity expert Jason Sgro has launched the Overwatch Foundation, a nonprofit organization dedicated to helping schools and municipalities strengthen their cybersecurity defenses. Sgro and his organization recently conducted a cybersecurity workshop for 26 school administrators in Concord, emphasizing the urgent need to address vulnerabilities.
Sgro highlighted the vulnerability of schools, emphasizing that they are prime targets for cybercriminals due to the high ratio of computers to staff and the volume of financial transactions. Schools often have trusted relationships with vendors, making them vulnerable to email spoofing and payment redirection.
While schools continue to face mounting cybersecurity challenges, concerted efforts are being made to protect students’ sensitive information and secure educational institutions. With increased awareness, proactive measures, and adequate funding, experts believe schools can mitigate the risks and provide a safe environment for students to learn and thrive.
In conclusion, cybersecurity threats are plaguing schools across the United States, with experts calling for transparency and proactive measures to prevent breaches. The impact of these attacks is far-reaching, disrupting learning and incurring significant costs for school districts. However, with increased awareness, funding, and the implementation of comprehensive cybersecurity measures, schools can safeguard student data and create a secure environment conducive to learning.
