Privacy & Security

As Cyberattacks Mount, Lawmakers Double Their Efforts to Protect Schools

By Alyson Klein — January 22, 2024 2 min read
Conceptual illustration of computer with a pixelated lock on screen.
  • Save to favorites
  • Print

State lawmakers and governors across the country are seeking to combat the spike in sophisticated cyberattacks on schools, enacting nearly twice as many new cybersecurity laws with implications for education last year as they did the year before, concludes a new report from the Consortium for School Networking.

Many of the new laws aim to ensure that K-12 officials are addressing cybersecurity, or seek to connect districts with greater technical expertise, found CoSN, a membership organization for district education technology officials. But only a handful provide new money to help schools meet their cybersecurity needs.

“I think the good news is the policymakers are waking up [to the fact] that this is an endemic problem for school districts,” said Keith Krueger, CoSN’s executive director. “But there just hasn’t been a big investment yet, in terms of cybersecurity.”

Schools’ cybersecurity needs are bigger than ever, Krueger said. He pointed to a recent report from S&P Global, a credit rating agency, that called K-12 schools in the United States a “playground for cybercriminals.” To make matters worse, only about a third of districts have a full-time staff member dedicated to cybersecurity, CoSN reported in its annual survey.

Governors in 33 states signed 75 cybersecurity laws that have education implications last year. That’s more than twice as many as in 2022, when states enacted 37 such laws. What’s more, legislators in 42 states introduced 307 cybersecurity bills that at least touched on education last year. That’s more than three times as many cybersecurity bills with a K-12 twist as in 2020, when 87 such bills were introduced.

Many of the new laws call for K-12 officials to step up or continue their focus on cybersecurity. For instance:

  • Arkansas called for annual reviews and updates to schools’ cybersecurity policies.
  • California now requires its Cybersecurity Integration Center, which helps prevent and handle cyberattacks, to coordinate and provide information to school districts.
  • Illinois established a task force charged with developing model policies for schools for addressing the role of artificial intelligence in education, including its cybersecurity implications.
  • Maryland called for virtual schools to provide cybersecurity policy information to parents.
  • New Mexico now requires educational technology plans that describe cybersecurity protections to be shared with the state education department.

To be sure, some states did approve new money for K-12 cybersecurity. Texas, for instance, provided more than $54 million in such funding and called on the state education agency to establish standards for electronic devices and software in school districts. And Minnesota allocated $24 million in grants to help public and charter schools improve both building and cyber security.

There’s also a push at the federal level to secure cybersecurity funding for K-12, including through a $200 million, three-year-pilot program proposed by Jessica Rosenworcel, the chair of the Federal Communications Commission.

That pilot will help, though the $200 million is relatively small compared to the scope of the problem, Krueger said.

When it comes to K-12 cybersecurity, “we got to think bigger,” Krueger said. “We got to think stronger. We got to move faster.”

Related Tags:


This content is provided by our sponsor. It is not written by and does not necessarily reflect the views of Education Week's editorial staff.
Assessment Webinar
Strategies for More Effective Progress Monitoring
Learn practical, evidence-based strategies for improving school-wide acceptance and use of progress monitoring data.
Content provided by Renaissance
Jobs Virtual Career Fair for Teachers and K-12 Staff
Find teaching jobs and other jobs in K-12 education at the EdWeek Top School Jobs virtual career fair.
This content is provided by our sponsor. It is not written by and does not necessarily reflect the views of Education Week's editorial staff.
Reading & Literacy Webinar
3 Large Districts Address Science of (Pre) Reading in Pre-K
Hear how 3 large districts prioritized early literacy in their pre-K programs and their results.
Content provided by Teaching Strategies

EdWeek Top School Jobs

Teacher Jobs
Search over ten thousand teaching jobs nationwide — elementary, middle, high school and more.
View Jobs
Principal Jobs
Find hundreds of jobs for principals, assistant principals, and other school leadership roles.
View Jobs
Administrator Jobs
Over a thousand district-level jobs: superintendents, directors, more.
View Jobs
Support Staff Jobs
Search thousands of jobs, from paraprofessionals to counselors and more.
View Jobs

Read Next

Privacy & Security Saturn Is a New App for High Schoolers. Here’s Why It Has Educators Concerned
Saturn is billed as a time-management app, but experts see potential privacy concerns in allowing it broad access to students' schedules.
6 min read
Image of a clock, calendar, and a pencil.
Privacy & Security Q&A AI Is Making Data Literacy a 'Survival Skill' That Schools Must Teach, Experts Argue
A new survey found that more than two-thirds of U.S. adults don't understand how their data is being used.
4 min read
Illustration of individual carrying binary data on his back to put back into the organized background of 1s and 0s.
iStock/Getty Images Plus
Privacy & Security Nonprofit Uses Halloween Run-Up to Showcase 'Scary' Privacy Issues in Learning Apps
Selling data for targeted advertising, sharing it with third party vendors, and vague data privacy policies raise concerns, nonprofit says.
4 min read
Glowing laptop with generic apps in the background with flying bats and ghosts and floating pumpkins.
Collage via Canva
Privacy & Security E-Rate Money for Cybersecurity? Schools Want It to Be a Top Funding Priority
The federal E-rate program has the potential to help schools build better defenses against cyberattacks.
3 min read
Dollar Sign Made of Circuit Board on Motherboard and CPU.