Ransomware attacks on US schools and colleges have surged in recent years, with 491 incidents recorded since 2018. These attacks impacted over 8,000 educational institutions and exposed 6.7 million individual records.
According to a new report by Comparitech, estimated costs exceed $2.5b in downtime alone as schools struggle to restore systems, recover data and strengthen cybersecurity measures.
In 2023, the number of attacks reached a record high of 121, significantly increasing from the 71 attacks reported in 2022.
The average downtime per attack has also grown, rising from just under nine days in 2021 to 12.6 days in 2023. The financial impact is severe, with downtime costing schools an average of $550,000 daily.
Key Findings of the Report
- 491 ransomware attacks from 2018 to July 2024
- Over 6.7 million records breached
- Estimated total cost of downtime: $2.54b
- The average ransom demand: $1.4m
- The average ransom payment: $169,000
The report also highlighted that ransomware demands vary significantly, ranging from $5000 to $40m.
Some of the most notable cases include hackers targeting Broward County Public Schools in 2021 with a $40 million demand, while Michigan State University faced a $6 million ransom in 2020. However, many schools refuse to pay, citing concerns that meeting demands could incentivize further attacks.
The most affected US states included:
- California: 43 attacks
- New York: 42 attacks
- Washington and Ohio: Most records breached, with over 800,000 records compromised in each state
As of 2024, ransomware attacks on US educational institutions have shown signs of declining, with only a handful of incidents reported in the year’s first half. However, experts caution that the impact of attacks often emerges later, suggesting the current figures may not fully capture the ongoing threat.
“With the threat of ransomware attacks across the US and worldwide remaining high across all industries, it’s never been more important to ensure employees are clued up, systems are updated, and frequent backups are being carried out,” Comparitech concluded.
Source:
https://www.infosecurity-magazine.com/news/ransomware-exposed-67m-records
Latest News:
- Highline Public Schools Forced to Close By Cyber-Attack
A cyber-attack forced a group of schools in the US Pacific Northwest to close for at least two days. Highline Public Schools has more than 17,500 students in grades K-12. The district has 34 schools and 2,000 staff in Washington State. On Sunday, the school district reported that it had suffered a cyber-attack and that … - Cyber-Attack on Payment Gateway Exposes 1.7 Million Credit Card Details
Electronic payment gateway Slim CD has been hit by a cyber-attack, potentially exposing the credit card details of 1.7 million individuals. The firm, which handles electronic payments for US and Canadian-based merchants, revealed that it became aware of suspicious activity in its computer environment around June 15, 2024. A subsequent investigation identified system access between … - Most Targeted DDoS Attacks Double With GovernmentsNew research says the number of distributed denial of service (DDoS) attacks continues to grow, doubling year over year (YoY). According to StormWall’s DDoS Attacks Report, attacks globally rose by 102% in the first half of this year compared to 2023. The government sector was the most brutal hit, with a 116% YoY increase. StormWall says …
