Privacy & Security

Cyber Hackers Attack Schools More Often Than You Think: 8 Ways to Stop Them

By Alyson Klein — March 31, 2022 1 min read
Image of a red glowing caution sign over a dark field of data.
  • Save to favorites
  • Print

The New York City public school system washit by the biggest hack on a single district in U.S. history, according to reports published this week. The incident is just the latest in a string of increasingly sophisticated cyberattacks on K-12 schools.

Experts say there’s no magic formula for districts to completely protect themselves from these incidents, but there are ways to reduce risk.

Here are 8 quick tips for preventing cyberattacks:

  1. Start with a risk assessment. That means asking questions, such as: What kinds of data does your district store that would be tantalizing to a hacker?
  2. Have a technology and cybersecurity plan in place, to roll out quickly in the event of an attack. Practice it with relevant staff members, just like you would a fire drill or an active shooter drill.
  3. Put in place multi-factor authentication so that staffers and students need more than just one username and password to access school computer systems. Some multi-factor authentication systems may text a code to the user’s cellphone, for instance, to confirm the person’s identity.
  4. Make sure employees understand that they should not use the same passwords on multiple sites, share them, or make them easily guessable.

    See Also

    Image shows a glowing futuristic background with lock on digital integrated circuit.
    iStock/Getty Images Plus
    Privacy & Security Explainer School Cyberattacks, Explained
    Alyson Klein, February 11, 2022
    12 min read
  5. Teach employees how to spot a phishing email, especially one in which criminals posing as someone in the district, or a vendor, may ask for their login credentials. Be sure they know they should immediately report any suspicious emails to the IT department.
  6. Back up your data. This remains good practice even though cybercriminals are getting better at infiltrating back-ups.
  7. Don’t forget about vendors. These days, nearly every organization a school district relies on for services uses technology in some way, down to the local dairy that provides milk for school lunches. Make sure that they have proper security measures in place. It should be a part of the district procurement process.
  8. Recognize that cybersecurity is not just the IT department’s problem. It’s everyone’s responsibility, and top district leaders need to not just support it but take ownership of making it happen too.

Related Video


Student Well-Being K-12 Essentials Forum Boosting Student and Staff Mental Health: What Schools Can Do
Join this free virtual event based on recent reporting on student and staff mental health challenges and how schools have responded.
This content is provided by our sponsor. It is not written by and does not necessarily reflect the views of Education Week's editorial staff.
Curriculum Webinar
Practical Methods for Integrating Computer Science into Core Curriculum
Dive into insights on integrating computer science into core curricula with expert tips and practical strategies to empower students at every grade level.
Content provided by

EdWeek Top School Jobs

Teacher Jobs
Search over ten thousand teaching jobs nationwide — elementary, middle, high school and more.
View Jobs
Principal Jobs
Find hundreds of jobs for principals, assistant principals, and other school leadership roles.
View Jobs
Administrator Jobs
Over a thousand district-level jobs: superintendents, directors, more.
View Jobs
Support Staff Jobs
Search thousands of jobs, from paraprofessionals to counselors and more.
View Jobs

Read Next

Privacy & Security Q&A AI Is Making Data Literacy a 'Survival Skill' That Schools Must Teach, Experts Argue
A new survey found that more than two-thirds of U.S. adults don't understand how their data is being used.
4 min read
Illustration of individual carrying binary data on his back to put back into the organized background of 1s and 0s.
iStock/Getty Images Plus
Privacy & Security Nonprofit Uses Halloween Run-Up to Showcase 'Scary' Privacy Issues in Learning Apps
Selling data for targeted advertising, sharing it with third party vendors, and vague data privacy policies raise concerns, nonprofit says.
4 min read
Glowing laptop with generic apps in the background with flying bats and ghosts and floating pumpkins.
Collage via Canva
Privacy & Security E-Rate Money for Cybersecurity? Schools Want It to Be a Top Funding Priority
The federal E-rate program has the potential to help schools build better defenses against cyberattacks.
3 min read
Dollar Sign Made of Circuit Board on Motherboard and CPU.
Privacy & Security Cybersecurity Is the Top Priority for Ed-Tech Officials. Funding Doesn’t Match the Demand
There is a growing gap between the rising threat of cyberattacks and the lack of state resources to protect schools from those attacks.
1 min read
Image of lock on binary code background.
DigitalVision Vectors/Getty