Hackers Are Costing K-12 School Systems More Than Money

Hackers are attacking America’s K-12 schools and whole communities are paying the price. Cyberattacks against school districts in Texas and Michigan disrupted classes for multiple days in the middle of September. In response, Congress is currently mulling the reauthorization of a key cyber grant program.

School districts are a prime target for cybercriminals due to their plethora of sensitive data and typically limited cyber budgets and support. Schools and universities were the third-most victimized industry by cybercriminals in 2024. A survey of 5,000 schools found that 82 percent experienced some type of cyber incident between July 2023 and December 2024.

Cybercriminals Target Schools With Ransomware

These attacks put community members at risk while costing school districts precious dollars. A 2022 attack on the Los Angeles Unified School District led to the publication of more than 2,000 students’ psychological records on the dark web. An attack on a Maryland school district compromised the personal information of more than 100,000 students, parents, and staff — including financial information and Social Security numbers. In 2024, the average ransomware recovery cost for K-12 schools was $2.28 million — the highest among targeted sectors.

School closures due to cyber incidents cause more than just financial impacts for schools. When schools close, parents need to find other childcare or stay home from work. Many students also rely on schools for services like meal programs, mental health services, and after-school care. Ransomware attacks like those in Texas and Michigan can cause operational disruptions that prevent students from accessing these services.

Districts Need Funding for Cyber Support Resources

Already tight budgets mean that cybersecurity funding is often a low priority for school districts. Especially in small- or low-income districts, IT support and cybersecurity efforts are both under-staffed and under-equipped to deal with attacks from sophisticated cybercriminals. For example, one high school teacher told FDD that in the rush of back-to-school preparations, cyber training was minimal and basic cybersecurity principles nearly non-existent. They received no training to change shared default passwords on their devices and management systems.

But even small steps like enforcing multi-factor authentication can make a big difference for schools looking to tighten their cyber defenses. Building an incident response plan and incorporating third-party cyber tools can also be game changers when cybercriminals attack. One Arizona K-12 technology director credited his previously developed incident response plan with enabling his rapid response to a cyberattack, mitigating any damage to the school’s system.

Reauthorizing Congressional Grants Can Help

The tools that protected that Arizona school were made possible by a state cyber readiness program. The technology director said, “Without that program, we never would have had the protection we do. We couldn’t afford it.” Both state and federal grant programs, like the State and Local Cybersecurity Grant Program (SLCGP) that expires on September 30, provide vital support for schools. A coalition of state and local officials delivered a letter to Congress highlighting the necessity of SLCGP funds for their cybersecurity. The House included a short reauthorization of SLCGP as part of its temporary government funding bill, but action from both chambers is necessary to protect the program’s long-term viability.

Delaying reauthorization of the SLGCP puts students and communities at risk. Additionally, if Congress wants to increase the program’s effectiveness, it could instruct DHS to remove the restrictions on the ability of recipients to use SLCGP funds to work with nonprofits that provide vital support for K-12 schools. Solidifying these resources will go a long way to supporting American students and communities.

Sophie McDowall is a research associate at FDD’s Center on Cyber and Technology Innovation (CCTI). For more analysis from the authors and FDD, please subscribe HERE. Follow FDD on X @FDD and @FDD_CCTI. FDD is a Washington, DC-based, nonpartisan research institute focusing on foreign policy and national security.