Privacy & Security

How Can Schools Reduce the Risk of Cyberattacks?

By Lauraine Langreo — December 13, 2022 2 min read
Silhouette of a hacker in a hoodie using laptop with binary code overlay.
  • Save to favorites
  • Print

Cyberattacks are now a daily threat for K-12 schools and the problem could get worse as educators lean further into technology use for teaching and learning, and as hackers grow more sophisticated.

An estimate from the K12 Security Information Exchange, a nonprofit focused on helping schools prevent cyberattacks, found that there have been more than 1,330 publicly disclosed attacks since 2016, when the organization first began tracking these incidents. Hackers have targeted districts of all sizes.

Most notably, in 2022, two big districts—Los Angeles Unified and New York City—faced cybersecurity challenges. And if it the biggest districts can fall victim, anyone can, experts say. In fact, smaller districts are particularly vulnerable because they often do not have the cybersecurity resources they need to protect themselves.

Cyberattacks are costly to school districts. A recent GAO report found that, on average, districts lose three days to three weeks of instructional time after an attack and that recovery time could range from two to nine months. So districts should make sure they’re securing their networks to avoid unnecessary costs.

Education Week has extensive coverage that addresses the question of what to do when your school or district is hit with a cyberattack and what to do to prevent attacks. Here is a collection of articles and videos Education Week has published on this topic that you could use to tackle this challenge.

What you need to know about school cyberattacks

Image shows a glowing futuristic background with lock on digital integrated circuit.

In this explainer, we lay out what educators need to know about the most common cyberattacks, such as ransomware and denial-of-service attacks, and why hackers target K-12 schools. (Spoiler alert: It’s because schools have access to so much data.)

Should districts pay a ransomware demand?

Illustration of an open laptop with a red envelope attached to a fishing hook.

Guidance from the FBI and the Cybersecurity and Infrastructure Security Agency discourages paying the ransom because it doesn’t guarantee that the data hackers are holding ransom will be decrypted or that the systems will no longer be compromised. But despite that guidance, the question of whether or not to pay ransom does not always have a simple answer.

Two district leaders also talked to Education Week about how they responded to a ransomware attack that closed schools for two days.

Tips on curbing cyberattacks

There’s no magic formula that will completely protect districts from cyberattacks, but there are ways to reduce the risks. In this special report, K-12 technology leaders and experts offer recommendations on how to prevent these incidents, especially with the proliferation of school-issued devices, and what the top cybersecurity priorities should be for districts. This video outlines ways to prevent costly cyberattacks.

Protecting student data should be paramount

Illustration of numerous computer windows overlapping with creepy eyeballs inside the close, open, and minimize circles within the various window screens.

Student data privacy encompasses a broad range of considerations, from students’ own smartphones, to classroom applications discovered and embraced by teachers, to district-level data systems, to state testing programs. Experts weigh in on why schools struggle to protect student data.

You can also quiz yourself on how much you know about protecting student data.


Student Well-Being K-12 Essentials Forum Boosting Student and Staff Mental Health: What Schools Can Do
Join this free virtual event based on recent reporting on student and staff mental health challenges and how schools have responded.
This content is provided by our sponsor. It is not written by and does not necessarily reflect the views of Education Week's editorial staff.
Curriculum Webinar
Practical Methods for Integrating Computer Science into Core Curriculum
Dive into insights on integrating computer science into core curricula with expert tips and practical strategies to empower students at every grade level.
Content provided by

EdWeek Top School Jobs

Teacher Jobs
Search over ten thousand teaching jobs nationwide — elementary, middle, high school and more.
View Jobs
Principal Jobs
Find hundreds of jobs for principals, assistant principals, and other school leadership roles.
View Jobs
Administrator Jobs
Over a thousand district-level jobs: superintendents, directors, more.
View Jobs
Support Staff Jobs
Search thousands of jobs, from paraprofessionals to counselors and more.
View Jobs

Read Next

Privacy & Security Q&A AI Is Making Data Literacy a 'Survival Skill' That Schools Must Teach, Experts Argue
A new survey found that more than two-thirds of U.S. adults don't understand how their data is being used.
4 min read
Illustration of individual carrying binary data on his back to put back into the organized background of 1s and 0s.
iStock/Getty Images Plus
Privacy & Security Nonprofit Uses Halloween Run-Up to Showcase 'Scary' Privacy Issues in Learning Apps
Selling data for targeted advertising, sharing it with third party vendors, and vague data privacy policies raise concerns, nonprofit says.
4 min read
Glowing laptop with generic apps in the background with flying bats and ghosts and floating pumpkins.
Collage via Canva
Privacy & Security E-Rate Money for Cybersecurity? Schools Want It to Be a Top Funding Priority
The federal E-rate program has the potential to help schools build better defenses against cyberattacks.
3 min read
Dollar Sign Made of Circuit Board on Motherboard and CPU.
Privacy & Security Cybersecurity Is the Top Priority for Ed-Tech Officials. Funding Doesn’t Match the Demand
There is a growing gap between the rising threat of cyberattacks and the lack of state resources to protect schools from those attacks.
1 min read
Image of lock on binary code background.
DigitalVision Vectors/Getty