study at home

Facing Coronavirus Growing Pains, California School Districts Confront Cybersecurity Breaches

In Berkeley, administrators are addressing an explicit “Zoombombing” incident as Oakland acknowledges a public leak of Google Classroom sites and Zoom meeting passwords.

School districts in Oakland and Berkeley have struggled with cybersecurity incidents in the past month, demonstrating the massive learning curve that administrators have been on to meet demands for remote learning during the COVID-19 pandemic.

With schools closed due to coronavirus concerns, many classes have been meeting via teleconference software like Zoom or sharing class materials through platforms like Google Classroom.

Oakland schools discovered a student privacy breach after administrators accidentally made hundreds of access codes and passwords used by teachers for online classroom meetings and video conferences public, The San Francisco Chronicle reported. With online trolls using social media and messaging tools to coordinate harassment campaigns in virtual classrooms, the breach could lead to disruption of classes with obscene language and images.

The Chronicle informed the district that their documents, featuring Google Classroom sites set up by teachers across the districts and access information to Zoom meeting rooms for teachers and students, were easily available online. The codes allowed anyone with a Gmail account to join the Google Classroom site and see students’ full names and comments posted on the site, according to the Chronicle.

Read More: New York City Bans Schools From Using Zoom Following Harassment Campaigns Targeting Classrooms

Oakland administrators removed the documents on April 8 and worked to lock down the classroom sites to not be available to users who are not students or staff. District spokesman John Sasaki said that the district was not aware of any breaches in its online platforms as a result of the information leaking online.

“This is all part of this new reality that we’re all experiencing now,” Sasaki said, according to EdSource. “We’ve made it very clear that anything that faces the public should have just the bare minimum of information. When it comes to codes and passwords, those should be sent via email, text message, or in a Google doc shared just with the class.”

A Berkeley high school class was victim to “Zoombombing,” the practice of internet trolls gaining access to classrooms or meetings and disrupting them with obscene images or language.

In the case of the Berkeley teacher, a man gained access to a Zoom meeting with students despite the teacher following proper security measures, such as setting a password and not sharing the link publicly. But the disruptor still managed to get in, exposing himself and shouting obscenities before the teacher was able to kick him out of the virtual classroom, the Chronicle reported.

Berkeley Superintendent Brent Stephens said it is likely that a student cut and pasted the access information to the meeting online, allowing a would-be predator to find it. The intruder also used a pseudonym that matched a student’s first name, reflecting the sophistication of predators coordinating virtual attacks on classrooms.

“We’re all kind of learning about the world that we’re in,” Stephens said, adding: “We’re being asked to sustain student learning while they’re at home and using technology to do it and just stumbling through these issues.”

Police are investigating the incident, which was disclosed to parents last Wednesday. The district has suspended holding virtual classrooms until it can figure out a solution with Zoom, which has vowed to take more action to protect users from intruders. Stephens hopes to restore teleconferencing this week with additional security practices, he told the Chronicle.

“It’s just heartbreaking hearing stories from parents that their kids aren’t getting out of bed until 11 in the morning and are displaying symptoms of depression,” Stephens said. “And [Zoom] was alleviating some of that.”

About the Author

Haley Samsel is an Associate Content Editor for the Infrastructure Solutions Group at 1105 Media.

Featured

  • Black Hills State University Takes an Open, Scalable Approach to Video Security

    Black Hills State University recognized the need for a centralized video system to improve campus security and streamline operations. The university sought a solution that could unify its main campus with a satellite location, enable cross-department access, and scale with future growth. By implementing open platform video technology, BHSU laid the foundation for a comprehensive, flexible, and scalable security infrastructure. Read Now

  • Pennsylvania School Uses Locked, Rolling Security Grille to Control Spectators, Secure Building

    St. Jude School in Mountain Top, Pennsylvania, is a private Catholic elementary school that serves students from Pre-K through grade 8. Recognized as a Blue Ribbon School by the U.S. Department of Education, St. Jude offers diverse educational programs designed to foster a nurturing and challenging learning environment, and extracurricular activities like sports are an integral part of promoting teamwork, discipline, and physical fitness. Read Now

  • Fire-Rated Glazing Assemblies Modernize Academic and Social Hub

    In spring 2023, the University of Pittsburgh opened the doors to a seven-story west wing addition to Alan Magee Scaife Hall. The medical school building features several updated lecture halls, labs and classrooms. It also includes team-based learning and small group rooms as well as an entire floor dedicated to medical students. This floor is meant for students to congregate, study and build community. Read Now

  • Access Control Trends Continue to Strengthen School Safety Security

    Class period bells have been ringing across campuses for a few months now, but that doesn’t mean the subject of safety was fully settled before the start of the new school year. As one wise person once said, “It’s a journey, not a destination”. That’s why it remains a leading issue among administrators, faculty, students, and communities. Schools are striving to be at the top of their class when it comes to the ability to control access instantly and securely, monitor suspicious behavior accurately and consistently, and respond to threats immediately and effectively. Ultimately, they aim to provide a reassuring, comfortable, and conducive environment for a rich learning experience. These goals apply whether at a community college in Southern California, a major university in Pennsylvania, or a rural K-12 district in Michigan. Read Now