In a WAAY 31 News investigation, we're finding out what can be done to stop hackers from targeting the computer systems of public schools and gaining access to children's private information.
You've read the stories and maybe seen it play out on the big screen... kids hacking into their school's computer system to change their grades. Nowadays, sophisticated sleuths are stepping that up a notch.
"Tracking down the bad guys is really hard because most of them are not in the U.S. They may be bouncing around computers all around the world," said Jeremy Blevins, CIS Department Chair at Calhoun Community College.
Last year, tech experts saw what they call one of the most devastating cyber-attacks ever. Hackers targeted Minneapolis public schools and held children's sensitive information hostage. When their demands were not met, everything was put online including mental health records, sexual assault reports, behavioral issues, and social security numbers.
More than 100,000 people's lives turned upside down by just a keystroke.
"It could affect future employment. It could have negative consequences in relationships later in life," said Blevins. "Your information is stored by people other than you. There's really limited options on what parents can do to protect that information."
Blevins has a laundry list of to-do items for schools that aren't cheap.
"You're starting to see this more in other industries is when they're using a cloud-based solution. They are using trusted vendors," Blevins said. "They went through all of the security checks and they know their systems are more hardened against attacks.
Blevins says schools need to take a pro-active approach by implementing multi-factor authentication and to build relationships with cyber security providers.
"So, if an attack happens, they are able to deal with it quickly instead of trying to scramble at the last minute," he said.
If those bad guys are caught, Blevins says the chances of them being brought to justice are slim. He says if the hackers live in a country where there is no extradition agreement, they can create havoc without consequence.
