K-12 Cybersecurity Insider | 10/19/2026 edition
A public newsletter providing curated cybersecurity news to the K-12 community as a service of K12 SIX, the K-12 education ISAC. Allowlist info[@]k12six[.]org - and sign up for the K12 SIX mailing list - to have future editions delivered to your inbox.
Mark Your Calendar
10/20 - “AI Readiness in K–12: Protecting Data and Managing Risk with Microsoft Purview” Webinar (sponsored by Microsoft)
10/27 - “Beyond the Firewall: Threats Facing K-12 Districts” Webinar (sponsored by Jamf)
10/28 - K12 SIX Monthly Membership Meeting (member-only)
11/10 - “E-Rate 2027 Readiness: Regulatory Updates, Cybersecurity Trends & Building Cyber Safe Schools” Webinar (sponsored by Fortinet)
In the News
K12 SIX is pleased to announce the availability of the Call for Speakers and Registration for the 5th Annual K12 SIX National Cybersecurity Conference to be held February 17-19, 2027 in Atlanta, GA. The 2027 K12 SIX National Cybersecurity Conference is a unique event designed exclusively for K-12 cybersecurity practitioners to identify and share solutions and best practices to better defend school communities from emerging cybersecurity threats, such as ransomware, phishing, and data breaches. On 10/31, the Call for Speakers will close. It is also the last day to secure Super Early Bird rates. Don’t miss out!
Abuse of compromised credential leads to breach of ETS, massive California student data breach
First announced late Friday, threat actors have stolen the data of millions of current and former California public school students from the state’s standardized testing vendor, ETS, including names, addresses and disability records. The compromised information affects more than the state’s current 5.7 million public school students as the incident dates back to 2023 enrollments. Also affected: students who left California but did not confirm their transfer to another school, dating back to 2006. How did it happen? An unauthorized party used a compromised login credential at various times from May 22 to September 18, 2026 to access an SFTP site used by ETS to exchange information with the California Department of Education (CDE) and exfiltrate the files at issue. It was not until September 25, 2026—the same day a threat actor posted an extortion demand on their dark web leak site—that ETS became aware of this unauthorized activity. For the latest, visit the incident page launched on the CDE website.
Forget voluntary pledges. It is past due time for collective action on K-12 vendor risk management
The ETS breach comes on the heels of other recently announced education vendor incidents, the most prominent of which involved Frontline Education. Other recent third party incidents include: Edmentum (MajorClarity), CoSN (thanks to one of their conference vendors, Cadmium), and multiple statewide school choice programs (via their vendor, ClassWallet). Plus, recall that Navigate360 has yet to make formal data breach notifications to victims of the breach of its anonymous tipline application. Coupled with Instructure’s Canvas incident, 2026 is shaping up to be the worst year yet for companies serving the K-12 education market. How does it get better? Collective action.
Cyber attacks since start of school year lead to major disruptions, closures
After rotating away from U.S. K-12 school systems for a short time, criminal threat actors have returned to targeting schools with ransomware. Since the start of this school year, K12 SIX has recorded over a dozen significant cyber attacks against K-12 organizations across the country resulting in significant operational disruptions and closures. The latest victim: Jerome School District in Idaho, which had to close its schools today. The best way to avoid falling victim: take advantage of free K-12 cybersecurity guidance developed by K-12 IT practitioners for K-12 IT practitioners.
Members Get More
The K12 Security Information eXchange (K12 SIX) operates as the independent, non-profit information sharing and analysis center (ISAC) exclusively for the K-12 education sector. Founded in 2020, organizations eligible for membership include school districts, charter schools and charter management organizations, private/independent schools, regional education agencies, and state education agencies. K12 SIX members get more.