Schools Face Rising Cyber Threats Amid Resource Constraints
A new report shows over half of surveyed schools experienced a cyber incident as rapid AI adoption outpaces formal district policies.
- By Jesse Jacobs
- October 27, 2026
More than half of surveyed schools and districts reported experiencing a cyber incident in the past year, with one in three reporting impacts to school operations.
The findings come from The State of K-12 Cybersecurity 2026: America's Schools on the Digital Frontlines in the AI Era, released by the Center for Internet Security, the Multi-State Information Sharing and Analysis Center and the Consortium for School Networking.
More than 11,600 cybersecurity incidents required escalation and response during the 2025-2026 school year. Reported attacks disrupted classroom instruction, student information systems, communications, payroll and other core infrastructure such as doors, locks, security cameras and bus schedules.
While artificial intelligence adoption has expanded across K-12 institutions, only 33% of surveyed organizations report having formal policies in place to govern its use. Furthermore, nearly 80% of respondents indicated a need for additional cybersecurity support, resources or guidance.
The report also noted defensive measures. About 83% of surveyed schools and districts implemented multi-factor authentication and email security protections. Additionally, districts utilizing the MS-ISAC protective DNS web security service blocked an average of more than 3.1 million potential cyber threats during the school year.