{"id":98734,"date":"2025-01-22T13:16:57","date_gmt":"2025-01-22T18:16:57","guid":{"rendered":"https:\/\/brocku.ca\/brock-news\/?p=98734"},"modified":"2025-01-22T17:20:47","modified_gmt":"2025-01-22T22:20:47","slug":"unity-needed-to-combat-cybercrime-in-schools-says-brock-prof","status":"publish","type":"post","link":"https:\/\/brocku.ca\/brock-news\/2025\/01\/unity-needed-to-combat-cybercrime-in-schools-says-brock-prof\/","title":{"rendered":"Unity needed to combat cybercrime in schools, says Brock prof"},"content":{"rendered":"

As details of a data breach affecting school boards across Canada continue to emerge, cybersecurity expert Aaron Mauro is encouraging everyone to answer the collective call to enhance online security.<\/p>\n

First discovered on Dec. 28, the cyberattack targeted PowerSchool, an administration software platform used widely by school boards across North America. Cybercriminals gained access to the platform and stole student records in several Canadian provinces.<\/p>\n

The high-profile data breach has since drawn the attention of Canada\u2019s privacy commissioner, whose office is now looking into the incident.<\/p>\n

\u201cThe issue of cybersecurity is not merely a problem for IT to solve, rather a problem society and communities must solve together,\u201d says Mauro, Associate Professor of Digital Media at Brock University.<\/p>\n

PowerSchool\u2019s reporting is offering a range of supports to affected students, including identity theft protection for up to two years.<\/p>\n

In the case of employees with compromised SSN\/SIN numbers, the risk of identity theft will last much longer if their data is traded or aggregated into other collections of compromised data.<\/p>\n

Organizations and institutions of all sizes are exposed to global threats by the very fact of internet connectivity, Mauro says.<\/p>\n

\u201cWe should instill strong security literacy in our workforce and foster resiliency by making cybersecurity practices commonplace and common sense,\u201d he says. \u201cIdentifying and protecting systems from threats should be an everyday practice for all employees working in environments with sensitive data, such as education.\u201d<\/p>\n

According to Microsoft\u2019s\u00a02024 Digital Defense Report<\/a>, the educational sector makes up 21 per cent of all cyberattacks.<\/p>\n

\u201cThe people who commit crimes against schools are not good people; they are attacking a target that does not have intrinsic financial value \u2014 the inherent vulnerability of children,\u201d Mauro says.<\/p>\n

The PowerSchool breach is an example of a \u201chack and leak attack,\u201d he says, where the threat of leaking data requires schools to pay to protect students\u2019 privacy. While PowerSchool paid a fee to those responsible, there are no guarantees the stolen data was destroyed.<\/p>\n

According to the Canadian Centre for Cybersecurity, paying ransoms in a hack and leak operation is risky, noting that cybercriminals may demand more money, continue to attack or simply sell the compromised data online.<\/p>\n

\u201cOf course, criminals are not trustworthy, so there is very little assurance that they would keep the exfiltrated data private,\u201d Mauro says.<\/p>\n

In Ontario, digital infrastructure should be the responsibility of the Ontario Digital Service, he says. “Moving forward, we could all benefit from a centralized system for education records that is as well protected as our medical records, tax records and other government operations.\u201d<\/p>\n

Mauro says parents and guardians should also be advocating for increased support for security processes in schools.<\/p>\n

\u201cPractices like Multifactor Authentication and strong password policies will help harden these targets a great deal,\u201d he says.<\/p>\n

In the case of the PowerSchool data breach, Mauro says parents have a right to be informed regarding response and recovery efforts, and that transparent reporting of cyberattacks helps other organizations better prepare for future attacks.<\/p>\n

\u201cRelying on under-regulated, closed source, proprietary software for security is perhaps no longer the best choice for our children,\u201d he says.<\/p>\n","protected":false},"excerpt":{"rendered":"

As details of a data breach affecting school boards across Canada continue to emerge, cybersecurity expert Aaron Mauro is encouraging everyone to answer the collective call to enhance online security.\u00a0<\/p>\n","protected":false},"author":1,"featured_media":98735,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[7484,3319,37,4767,1],"tags":[8542,124,30],"_links":{"self":[{"href":"https:\/\/brocku.ca\/brock-news\/wp-json\/wp\/v2\/posts\/98734"}],"collection":[{"href":"https:\/\/brocku.ca\/brock-news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/brocku.ca\/brock-news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/brocku.ca\/brock-news\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/brocku.ca\/brock-news\/wp-json\/wp\/v2\/comments?post=98734"}],"version-history":[{"count":1,"href":"https:\/\/brocku.ca\/brock-news\/wp-json\/wp\/v2\/posts\/98734\/revisions"}],"predecessor-version":[{"id":98736,"href":"https:\/\/brocku.ca\/brock-news\/wp-json\/wp\/v2\/posts\/98734\/revisions\/98736"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/brocku.ca\/brock-news\/wp-json\/wp\/v2\/media\/98735"}],"wp:attachment":[{"href":"https:\/\/brocku.ca\/brock-news\/wp-json\/wp\/v2\/media?parent=98734"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/brocku.ca\/brock-news\/wp-json\/wp\/v2\/categories?post=98734"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/brocku.ca\/brock-news\/wp-json\/wp\/v2\/tags?post=98734"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}