Stolen staff logins spread attacks between K-12 school districts

MS-ISAC told 808 of its 6,116 K-12 member organizations that staff credentials were circulating on dark web marketplaces. Attackers use hijacked accounts to phish contacts at other districts, and 1,159 of 1,796 malware infections (about 65%) traced to malicious ads on legitimate websites.

• 808 of 6,116 K-12 organizations were notified of exposed staff credentials
• 65% of 1,796 infections traced to malicious ads on legitimate sites
• 66% of districts have 1–2 security staff, 11% have none
• 51% of districts had a cyber incident in the past 12 months