3 in 4 Education Institutions Have Identified a Cyber Attack on Their Infrastructure in the Past Year -- Campus Technology

Research

3 in 4 Education Institutions Have Identified a Cyber Attack on Their Infrastructure in the Past Year

By Rhea Kelly
09/12/24

Seventy-seven percent of institutions across K-12 and higher education have uncovered a cyber attack on their infrastructure within the past 12 months, according to a new survey from cybersecurity company Netwrix. That represents a significant increase from 2023, when 69% of education organizations reported the same.

For its 2024 Hybrid Security Trends Report, Netwrix surveyed 1,309 IT and security professionals from a variety of industry sectors in 104 countries, to find out about their IT infrastructure, security challenges, and more. Education-specific survey results were released in a separate report, "Additional Findings for the Education Sector."

The most common attack vectors in education were phishing, user account compromise, and ransomware or other malware, the report found. Of the institutions that experienced a security incident, 47% reported facing unplanned expenses to fix security gaps, while 42% said they experienced no impact. Other cyber attack consequences included compliance fines (cited by 14% of respondents), change in senior leadership (11%), loss of competitive edge (11%), and lawsuits (10%).

Respondents were also asked about their biggest data security challenges. Fifty-one percent pointed to a lack of budget for data security initiatives; 47% said mistakes or negligence by business users; and 45% said an understaffed IT/security team.

"While educational institutions may have the same complexity as large organizations, they typically lack matching budgets and resources to deal with their dynamic environments," commented Ilia Sotnikov, security strategist at Netwrix, in the report. "It is crucial for the IT security teams in the education sector to have processes and tools in place to govern the identities, audit their activity, and monitor for any abnormal or malicious behavior."

The full report is available on the Netwrix site here.

About the Author

Rhea Kelly is editor in chief for Campus Technology, THE Journal, and Spaces4Learning. She can be reached at [email protected].

E-Mail this page

Printable Format

Featured

Want to Close the Skills Gap? Bring Learning Closer to Work

If the jobs of the future require different skills, creating those jobs is only half the equation. We also need realistic pathways for people to reach them.
Why Cross-Skilling Is the Smartest Investment a Campus IT Team Can Make

Higher education IT teams are being asked to keep pace with AI, cloud, and cybersecurity on flat budgets, and hiring a specialist for every new need can no longer keep up. Building adjacent skills across the people already on staff creates more agile, resilient teams that move faster and retain talent without adding headcount. Pluralsight makes the strategy work through skill assessments, tailored learning paths, hands-on labs and sandboxes, and microlearning that fits into the flow of work.
Cybersecurity Researchers: AI Has Crossed into the Live Attack Chain

AI is moving beyond assisting cybercriminals and beginning to operate within live attacks, according to a new report from Check Point Research. The technology is making sophisticated capabilities faster and more accessible while creating new security risks for businesses deploying their own AI systems.
Rubrik Brings Agentic AI to Flagship Cyber Resilience Platform

Rubrik recently introduced Rubrik AI, positioning the company's cyber resilience platform around agentic operations across data, identity, and AI infrastructure.