I have a bit of background in the computer security arena–just enough to know it's complicated and hard to defend oneself.  I also have some background advising various levels of government agencies on their technology decisions.  For the most part, they are trailing edge shops with limited budgets and older technology.  So when I read this Calmatters.org piece on schools being unprepared, I was not surprised in the least.

If Los Angeles Unified, the state’s largest school district, can be hit with a ransomware attack, how prepared are California’s public schools for the increasing threat of cyberattacks?  It depends, according to experts working in the field of cybersecurity and information technology in the state’s public schools. Some districts might have a handful of cybersecurity professionals on staff, while others don’t have any. On top of that, there are currently no statewide guidelines for digital security at school districts.

Public schools possess confidential data ranging from Social Security numbers to health records and financial information. While the Los Angeles Unified attack has drawn national attention, Loftus says this prominent case is just the latest example of public education’s vulnerability to cyberattacks.   “Education is a mash-up of multiple different sectors,” he said. “We are transportation providers. We provide food and nutrition services. We have school nurses and so much more.”  And as school districts and the state took steps to close the digital divide during the pandemic, more students online means more blindspots vulnerable to cyberattacks.

The shame of the whole scenario is that BSD, SMUSHD and even the city of B'game and the county spend a lot of energy on things that are far less important.  Some of that is forced upon them like going to district-based elections.  But a lot of it is self-inflicted.  If we put as much effort into hardening our tech as we do forcing the march to an all-electric future we would be a lot safer.  I really hope our misplaced priorities don't end up costing the taxpayers a ton of ransom money.