Ransomware is Wreaking Havoc on Schools Across US

Cyberattacks on schools are becoming more frequent and more severe, with the number of confirmed attacks more than doubling since 2021.

School systems are known to be particularly lucrative targets for cybercriminals due to the substantial amount of sensitive student data that these districts must manage. Considerable amounts of data and lax cybersecurity practices create the prime opportunity for hackers to make a quick payday. There have been several well-known cyberattacks against school systems in 2022, some of the most significant incidents include:

• Los Angeles Unified School District: LAUSD, the second-largest school district in the U.S., experienced a ransomware attack by Vice Society
• South Redford School District, Michigan: A malicious cyberattack caused the shutdown of the school districts for more than two days
• Mars Area School District, Pennsylvania: Data stolen in a recent hack by Vice Society was published to the dark web

Unfortunately, the initial ransomware attack is not the only threat. Some school districts opt not to pay the ransom, but instead replace compromised hardware and wipe systems in an attempt to avoid paying the price. While this may address the cost of the ransom demand, it does nothing to recover the stolen or encrypted data and the extortion that may follow.

While school districts struggle to adapt to the evolving threat landscape, cybercriminals continue to cash in. Many organizations are not even aware of the vulnerabilities within their own infrastructure. It is essential that school districts prioritize a proactive approach to cybersecurity. The FBI and CISA have released a joint advisory with recommendations to mitigate risk, read more on that here.

Ready to take control of your cybersecurity? Contact Securus360 to schedule your vulnerability assessment and to learn more about Managed eXtended Detection & Response (MXDR).