Privacy & Security

Cyber Hackers Attack Schools More Often Than You Think: 8 Ways to Stop Them

By Alyson Klein — March 31, 2022 1 min read
Image of a red glowing caution sign over a dark field of data.
  • Save to favorites
  • Print

The New York City public school system was hit by the biggest hack on a single district in U.S. history, according to reports published this week. The incident is just the latest in a string of increasingly sophisticated cyberattacks on K-12 schools.

Experts say there’s no magic formula for districts to completely protect themselves from these incidents, but there are ways to reduce risk.

Here are 8 quick tips for preventing cyberattacks:

  1. Start with a risk assessment. That means asking questions, such as: What kinds of data does your district store that would be tantalizing to a hacker?
  2. Have a technology and cybersecurity plan in place, to roll out quickly in the event of an attack. Practice it with relevant staff members, just like you would a fire drill or an active shooter drill.
  3. Put in place multi-factor authentication so that staffers and students need more than just one username and password to access school computer systems. Some multi-factor authentication systems may text a code to the user’s cellphone, for instance, to confirm the person’s identity.
  4. Make sure employees understand that they should not use the same passwords on multiple sites, share them, or make them easily guessable.

    See Also

    Image shows a glowing futuristic background with lock on digital integrated circuit.
    iStock/Getty Images Plus
    Privacy & Security Explainer School Cyberattacks, Explained
    Alyson Klein, February 11, 2022
    12 min read
  5. Teach employees how to spot a phishing email, especially one in which criminals posing as someone in the district, or a vendor, may ask for their login credentials. Be sure they know they should immediately report any suspicious emails to the IT department.
  6. Back up your data. This remains good practice even though cybercriminals are getting better at infiltrating back-ups.
  7. Don’t forget about vendors. These days, nearly every organization a school district relies on for services uses technology in some way, down to the local dairy that provides milk for school lunches. Make sure that they have proper security measures in place. It should be a part of the district procurement process.
  8. Recognize that cybersecurity is not just the IT department’s problem. It’s everyone’s responsibility, and top district leaders need to not just support it but take ownership of making it happen too.

Related Video


Recruitment & Retention Live Online Discussion A Seat at the Table: Chronic Teacher Shortage: Where Do We Go From Here?  
Join Peter DeWitt, Michael Fullan, and guests for expert insights into finding solutions for the teacher shortage.
This content is provided by our sponsor. It is not written by and does not necessarily reflect the views of Education Week's editorial staff.
Student Achievement Webinar
Mission Possible: Saving Time While Improving Student Outcomes
Learn how district leaders are maximizing instructional time and finding the best resources for student success through their MTSS framework.
Content provided by Panorama Education
Reading & Literacy K-12 Essentials Forum Writing and the Science of Reading
Join us for this free event as we highlight and discuss the intersection of reading and writing with Education Week reporters and expert guests.

EdWeek Top School Jobs

Teacher Jobs
Search over ten thousand teaching jobs nationwide — elementary, middle, high school and more.
View Jobs
Principal Jobs
Find hundreds of jobs for principals, assistant principals, and other school leadership roles.
View Jobs
Administrator Jobs
Over a thousand district-level jobs: superintendents, directors, more.
View Jobs
Support Staff Jobs
Search thousands of jobs, from paraprofessionals to counselors and more.
View Jobs

Read Next

Privacy & Security 3 Ways Schools Can Reduce Cybersecurity Risks
A new federal report outlines steps schools can take to protect against cybersecurity threats.
4 min read
Illustration of Internet network data computer laptop security shield and lock symbol.
DigitalVision Vectors/Getty
Privacy & Security District Leaders Are More Worried Than Ever About Data Privacy. New Center Aims to Help
Parents are asking more questions about data privacy issues related to the technologies schools are using.
2 min read
Data security and privacy concept. Visualization of personal or business information safety.
iStock/Getty Images Plus
Privacy & Security Most Teachers Think Cyberattacks Won't Affect Schools. District Leaders Disagree
Teachers and district leaders perceive cybersecurity vulnerabilities differently, according to a survey.
3 min read
Illustration of cloud computing and lock.
iStock / Getty Images Plus
Privacy & Security How Can Schools Reduce the Risk of Cyberattacks?
Cyberattacks are costly to K-12 schools, not just in terms of money, but also in how much instructional time students lose.
2 min read
Silhouette of a hacker in a hoodie using laptop with binary code overlay.
iStock/Getty Images Plus