By the Numbers. Education Data Breaches.

Thus far in 2017, the number of education data breaches:

  • doubled over 2016
  • the first half of 2017 saw an increase of 103%
  • North American bears the brunt of educaiton hacks, with 88% occuring here
  • 74% were caused by malicious outsiders
  • 13% were caused by stolen, lost or otherwise compromised records

Campus Technology | Education Data Breaches Double in First Half of 2017

4 Questions Schools are Asking Education Vendors

  • What data are they capturing?
  • Why are they capturing it?
  • Where are they housing it?
  • How do they recommend that schools house the data?

As schools place a greater concern on ensuring parents that student data is protected, schools are asking their edcation vendors more about data security.

Ed Tech | 3 Tips to Keep Parents Assured that Student Data Is Protected

Consumer Tech Assoc. Recommends Consistent Education Policy for Student Data Security. Bonjour Education Contractors

The Consumer Tech Association filing with the Commerce Department recommends government action on cybersecurity/datasecurity policies for education because there are so many differnt players in education.

The recommendations that we may soon see in Education Procurement Contracts:

  • market driven solutions e.g. contractors should step up and talk about their student data security protocols
  • instead of government checklists, we need nimble polcies that can adapt as tech changes
  • public-private…

Cybersecurity Policy Not only an IT Issue. Impacts 6 HUGE Policy & Business Issues:

The 2016-2017 Chair of the National Governor Association, Virginia Governor Terry McAuliffe, explains that cyber security directly impacts these policy areas and businesses:

  • technology
  • health care
  • education
  • public safety issue
  • business and economics, including insurance
  • democracy (elections)

State Scoop | 38 governors sign cybersecurity compact

38 Governors Sign CyberSecurity Compact. 3 Reasons Why & 4 Key Policy Issues.

National Governors Association is pushing for state reform of cyber security laws because:

  • The federal government is too slow & too inactive
  • Cyber security is not just an IT issue.
  • Cyber Security is a  technology issue, a health issue, an education issue, a public safety issue, an economic issue and a democracy issue

The National Governor’s Association initiative, Meet the Threat, calls for:

  • instituting cybersecurity governing bodies
  • organizing computer crime units for law enforcement…

A University Data Breach Informed Statewide Policymakers. 1 Prohibition Emerged.

Washington State University kept sensitive personal information on a backup disk locked in a $159 safe in a small safe in a storage unit.

The WSU storage unit was burlagized, and was the only unit burgalarized.

The takeaway for policy makers: Do not allow state institutions to store personal data in storage units. 

Common sense governing. Better late than never.

Government Technology | Washington State University Data Breach Teaches Valuable Cybersecurity Lesson (Editorial)

Local Trend. 5 Elements of a School District's Data Security Policy. + Procurement

Why are Frederick County Public Schools (Maryland) adopting new data security rules? The School experiences a data breach.

5 Elements from the new data breach policy:

  • Requires frequent and thorough teacher and staff training for treatment of sensitive information
  • incident response planning
  • acceptable use of technology
  •  information technology security awareness
  • sets guidelines to mitigate and communicate risks for FCPS student and staff information systems

Also requires a 3rd party…

Advocacy Trend. Education Data Privacy Toolkits. Activate against Schools and Ed Tech Companies

The advocates:  Parent Coalition for Student Privacy and the Campaign for a Commercial-Free Childhood

The toolkit for parents to empower them on student data privacy: toolkit

What’s the target: data privacy policies of school districts and ed tech companies

Education Week | New Student Data Privacy Toolkit Encourages Parent Advocacy

Texas School District. Hacked. Grades Change. 3 Key Points to Know.

How the Spring Branch School District school was hacked: with a stolen password

What did the hacker do once in the SBISD computer system: changed grades

Was the hacker caught?

  • Yes, the 10th grade student was arrested & charged with breaching a computer system, a state jail felony
  • The student offered to change other student grades for a fee

SC Media | Texas 10th grader hacks school network to change grades

KHOU | Student accused of changing grades at Memorial HS

4 Prong Approach to Student Data Privacy

Wyoming legislature had a package of student data privacy bills which will:

  • A bill to protect college students’ work and privacy- passed
  • 2 bills protecting students’ digital information privacy
  • A bill which would require the state superintendent and other agencies to develop guidelines for student data privacy, security and privacy- passed

Uinta County Herald | Legislative session wraps