10 Cybercrimes Against Colleges and K-12 Schools, and How To Prevent Them

This report documents a large and growing wave of cyber incidents targeting educational institutions—highlighting a 2023 spike in breaches and disclosures, prevalent ransomware and extortion activity (including high-impact incidents against UCSF, LAUSD, Finalsite, and others), exploitation of third-party vulnerabilities such as MOVEit, and practical recommendations for 24×7 monitoring, staff training, and managed security operations to reduce risk and exposure.