Some K-12 public schools are racing to improve protection against the threat of online attacks, but lax cybersecurity means thousands of others are vulnerable to ransomware gangs that can steal confidential data and disrupt operations. Since a White House conference in August on ransomware threats, dozens of school districts have signed up for free cybersecurity services, and federal officials have hosted exercises with schools to help them learn how to secure their networks, said Anne Neuberger, the Biden’s administration’s deputy national security advisor for cyber and emerging technology, reports the Associated Press. She said more districts need to take advantage of programs available that would better guard against online attackers who are increasingly targeting schools. Their aim is to lock up computer systems, and sometimes steal and publish sensitive personal information if a ransom is not paid.
“Compromises happens again and again, often in the same way, and there are defenses to protect against it. And here the government has really brought companies together, brought agencies together to deploy some of those,” Neuberger said. “Don’t give up. Reach out and sign up. And your kids will be a lot safer online.” The Biden administration has announced steps to help cash-strapped schools, which have been slow to build up cybersecurity defenses. Ransomware attackers, many based in Russia, have not only forced schools to close temporarily but have exposed a wealth of students’ private information. Last month, parents sued the Clark County School District in Nevada, alleging a ransomware attack led to the release of sensitive information about teachers, students and their families in the fifth largest school U.S. district. In another case, hackers broke into the Minneapolis Public Schools system and dumped sexual assault case records and other sensitive files online after the district refused to pay a $1 million ransom. More than 9,000 small school districts across the U.S. with up to 2,500 students -- roughly 70 percent of public districts -- are eligible for free cybersecurity services from web security company Cloudflare through a new program called Project Cybersafe Schools.