This week’s blog features a timely article from E Learning Industry: “R Is For Ransomware: Cybersecurity For K-12 Schools”.
In 2020, 85% of school leaders predicted a spike in cybersecurity threats targeting educational facilities. Were leaders right? It looks like they were. Here’s what you need to know about past cyber attacks and warding off ransomware today.
For Educators: Network Security To Defeat Ransomware Today
Last year, cyberattacks targeting schools reached record levels. The US Cybersecurity and Infrastructure Security Agency (CISA) reported that they’re becoming increasingly aggressive. K-12 schools were the most common targets. Approximately 57% [1] of ransomware incidents that occurred during July and August of last year involved K-12 schools. Since the beginning of 2021, more than 40 ransomware attacks have ravaged operations within public school districts.
“In recent incidents affecting the education sector, ransomware has led to the loss of student coursework, school financial records, as well as data relating to COVID-19 testing,” stated a recent National Cyber Security Centre alert.
Tens of millions of students, teachers, and administrative staff have witnessed the traumatic effects of ransomware. Student records can sell for as much as $350 [2] on the dark web and can potentially lead to fraud, identity theft, and other unwanted outcomes.
Real-World Hacking Of Schools
According to the Cybersecurity Resource Center, schools experienced an 18% [2] increase in ransomware attacks in 2020 as compared to 2019. A school district in Florida recently suffered a ransomware attack where hackers threatened to release personal information belonging to teachers, staff, and students unless a $40 million [1] ransom was paid. Any K-12 school could run into a similar scenario.
School System Security
Over 1/3 of K-12 [2] support staff state that their districts maintain three or fewer IT specialists. Schools typically lack the human resources and the budgetary resources to maintain adequate security. In turn, this transforms them into targets for hackers.
Many have observed that major conglomerates have millions to spend on cybersecurity. Schools have slim budgets. Educators are asking, “How can schools expect to keep pace?”
Here’s How Schools Can Protect Systems With Internet Security
Protecting school systems is tough, but there are strategies and tactics that can make a huge difference.
- School district personnel should ensure that systems are backed up in the cloud. While a limited amount of budget is necessary for this, it’s not generally perceived as an expensive procedure. According to the NCSC [3], “Offline backups are the most effective way to recover from a ransomware attack.”
- Schools can also proactively train teachers to scan emails for cyber threats. Professional training can be immensely helpful in blocking attacks. Looking for ways to refresh professional cybersecurity training? Check out this article.
- Anti-virus software can help stop breaches before they begin. Anti-malware and anti-phishing technologies can be especially useful. Ensure that your configuration does not allow for credential reuse and that it detects compromised passwords.
More helpful tactics:
- Systems should be patched in a timely manner. Systems without patches are uniquely vulnerable to attack.
- Implementing network segmentation can prevent lateral attacker movement.
- Administrators should monitor privacy settings in programs.
- Audit logs can enable IT staff to monitor who is in the system, when, and why.
- Setting up least-privileged access and zero trusts can also pay dividends.
- School districts may want to consider hiring more cybersecurity staff. The cost could be far less than those involved in cleaning up a cyber attack or paying a ransom.
- Check systems before weekends and holidays, as attacks are especially likely to occur during these intervals.
The Third-Party App Problem
Cybercriminals are aware of the fact that some school districts maintain adequate or exemplary cybersecurity defenses. In these instances, hackers may attempt to sidestep systems by interrupting a third-party’s ecosystem. They can then use this ecosystem as a vehicle through which to conduct an attack on your system. In addition to creating digital barriers around your own district’s resources, ensure that your institution also monitors the security of third-party app vendors.
If Your School Experiences A Ransomware Attack, Should You Pay The Fees?
As many as 45% of US companies pay cybercriminals for file restoration. However, only 26% [4] of those who handed over the money had their files unlocked. The best means of giving ransomware the run-around is to invest in better security measures and to develop a stronger cybersecurity posture.
Immediate Ransomware Steps
If hit with a ransomware attack, you should turn off the device experiencing the issue and disconnect it from the network. An infected computer can spread the computer virus to other devices attached to the network. Immediately after, call an IT professional, who may or may not need to escalate the case to others within your organization, attorneys, or the FBI. If you’re interested in learning more about the arguments supporting schools’ prioritization of cybersecurity measures, check out this article [5] for more information.
References
[1] Now ransomware is inundating public school systems
[2] 6 top ways schools can avoid ransomware attacks
[3] Ransomware warning: There’s been another spike in attacks on schools and universities
[4] Breaking news: The reality of ransom payments
[5] 5 REASONS SCHOOLS MUST PRIORITIZE CYBER SECURITY
Click here to read the original article.
Are you ready to strengthen your cyber security efforts this school year?
Find out how to protect your school district’s network, administration, educators, and students with the latest Managed Cyber Security solutions from Computers Nationwide.
You can trust our team to do what’s best for your school district as we are the premier choice MSP for Illinois, Wisconsin, and Indiana schools!
Whether your educational facility needs stronger cyber security, a data protection & recovery plan, or an overhaul to your entire IT infrastructure, Computers Nationwide will provide solutions tailored to the specific needs of your organization!
Call the IT experts at CN to build a secure cyber defense ASAP: (847) 419-9900
