Ransomware’s School of Silence: U.S. Education Sector Flunks Data Breach Reporting 101
Comparitech’s study reveals that U.S. schools take an average of 4.8 months to disclose ransomware breaches. Some wait six months, often only reacting when data hits the dark web. Meanwhile, cybercriminals are practically hosting show-and-tell sessions. Time to swap procrastination for punctuality, folks!
Hot Take:
Ah, the U.S. education sector, where the syllabus might be outdated, but the data breach notifications are practically ancient! Who knew that “delayed gratification” was the new elective for ransomware response?
Key Points:
- Countries like the U.S., U.K., Australia, and Canada have cyber laws enforcing mandatory reporting of ransomware attacks within 48-72 hours.
- The U.S. education sector is taking an average of 4.8 months to disclose data breaches from ransomware attacks.
- Some schools delay notifying affected individuals for up to six months.
- Many breaches only become public when stolen data appears on the dark web.
- A major breach of PowerSchool software late last year affected over 100 school districts.
Already a member? Log in here