Schools and universities in the US are facing mounting cyber threats from Iranian and North Korean hackers, targeting sensitive student information. Educational institutions are being targeted through sophisticated malware and phishing attacks, with threat actors creating fake companies to access regulated data like health and financial records. According to Microsoft's threat intelligence division, the education sector is now among the top three targeted industries, with schools at the forefront of battling evolving adversary tactics

 US schools vulnerable to cyberattacks from Iran and North Korea compromising student data

The UK also faces similar cyberthreats, with a significant percentage of higher education institutions experiencing weekly breaches. The National Cyber Security Center is providing protective services to combat ransomware attacks on schools. K-12 districts are especially vulnerable due to the wealth of student data they store, making them prime targets for identity theft and fraud. To mitigate risks, schools are advised to enhance cybersecurity measures and implement training programs. Universities, on the other hand, face an average of 2,507 cyberattack attempts weekly, with threat actors focusing on intellectual property and sensitive research data. Iranian threat actors have been identified engaging in password spray attacks and phishing to breach university networks, underscoring the critical need for enhanced cybersecurity measures and threat awareness in the education sector.
https://www.bankinfosecurity.com/schools-face-spike-in-cyberattacks-from-nation-state-hackers-a-26527