Fraud Management & Cybercrime , Ransomware

Greater Toronto School Offline Following 'Cyber Incident'

Online Learning and Student Chromebooks Disabled for Thousands of Schoolchildren
Greater Toronto School Offline Following 'Cyber Incident'
Image: Shutterstock

A cyber incident at a school district serving Toronto's outer suburbs disabled online learning for thousands of students and plunged school administration into a mainly pre-digital era.

See Also: Stopping Business Email Compromise and Ransomware Attacks with Human-centric Security

The Durham District School Board, which serves more than 74,000 day students, disclosed Sunday that the incident had yanked phone and email services online along with "most" student Chromebooks.

Schools are open, but attendance will be taken manually and parents won't be notified if their child is absent.

The district is responsible for public education across 136 elementary and secondary schools in the eastern Toronto exurbs. It employs over 7,000 teaching and educational services staff.

The district school board says it discovered the incident on Friday and took steps to secure its network and retain outside assistance. It has notified law enforcement.

The school district's notification about the incident doesn't say the word "ransomware" and a district spokesperson declined to comment on whether its systems have been maliciously encrypted. The spokesperson clarified that "with the network down, people cannot be authenticated to the network, hence the Chromebooks are not being operational."

Ransomware attacks against school districts - as with other sectors such as healthcare that are perceived as soft touches by hackers due to poor security standards and the high sensitivity of the data they hold - have spiked in recent years. Driving that trend in the education sector was the sudden, novel coronavirus pandemic-driven shift to remote learning tools. That change expanded schools' attack surface but typically occurred without a consummate increase in defense resources (see: As Classes Resume, Schools Face Ransomware Risk).

Some Durham staffers took out their frustrations online. The Twitter account of Norman G. Powers Public School tweeted that employees seemed unable book supplies online. "Are we sure that it is working? And how are admin or staff to contact dispatch if assistance is needed?"

A substitute teacher who was sick and wanted to notify the school but was unable to log in also took to Twitter to ask about delivering lesson plans.

"We have notified the school you are at and they should be reaching out. Thanks," the school district responded.


About the Author

Mihir Bagwe

Mihir Bagwe

Principal Correspondent, Global News Desk, ISMG

Bagwe previously worked at CISO magazine, reporting the latest cybersecurity news and trends and interviewing cybersecurity subject matter experts.




Around the Network

Our website uses cookies. Cookies enable us to provide the best experience possible and help us understand how visitors use our website. By browsing ransomware.databreachtoday.com, you agree to our use of cookies.