LA, Hackers Infiltrate 2nd Largest US School District In Growing Trend
The Guardian, Sept. 6, 2022. - Los Angeles Unified, with over 600,000 students, suffers ‘significant infrastructure disruption’ but classes set to take place as usual. -
Hackers targeted the second-largest school district in the US with a cyber-attack over Labor Day weekend, officials at Los Angeles unified school district have confirmed. The district characterized the cyber-attack as a “significant disruption to our system’s infrastructure” but officials said they did not expect major problems with teaching or such services as transportation and food. It said business operations might be delayed or modified. Classes were scheduled to take place as usual Tuesday morning, the district – which includes more than 600,000 students in kindergarten through 12th grade – said in a statement.
“Since the identification of the incident, which is likely criminal in nature, we continue to assess the situation with law enforcement agencies,” the district said, adding that a “response protocol” was implemented to mitigate districtwide disruptions, including access to email, computer systems and applications. The perpetrators appear to have targeted the facilities systems, which involves information about private-sector contractor payments which are publicly available through records requests rather than confidential details like payroll, health and other data, officials said. Authorities believe the attack originated internationally and have identified three potential countries where it may have come from, though Los Angeles Unified Superintendent Alberto Carvalho would not say which countries may be involved.
The district said the investigation and response involved the White House, the US Department of Education, the FBI and the Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency. The attack comes as ransomware is on the rise, targeting the education sector at higher rates than it had been before. In August and September 2021, 57% of ransomware incidents reported to the FBI involved K-12 schools compared to 28% of incidents from January through July. In 2021 56% of K-12 schools and 64% of higher education organizations surveyed by digital security firm Sophos reported being hit by some type of ransomware.
“This egregious cyber-attack is the latest example of the pervasive threat that predatory cybercriminals pose to everyone from multinational businesses to young schoolchildren,” said Darren Guccione, CEO and co-founder of the cybersecurity firm Keeper Security. “No one is safe from cybercrime and often the most vulnerable among us are the most likely to be targeted." The increase has come as the Covid pandemic forced much of the education sector online, while schools struggle to keep up security practices. In an advisory to schools released in 2021, the FBI suggested more training of employees to monitor networks for suspicious activities. Schools are an attractive target for hackers for a variety of reasons...
https://www.theguardian.com/us-news/2022/sep/06/los-angeles-unified-school-district-cyber-attack