Lakelands Park Middle School ramps up security after social media threat

 https://www.fox5dc.com/video/1425073

MD Office of Legislative Audits Report on Baltimore County Public Schools Cybersecurity Incident

Maryland Office of Legislat... by Parents' Coalition of Montg...

Finding 6 – We recommend that BCPS

a. periodically review employee access capabilities to ensure all access is appropriate and incompatible duties are segregated (repeat)In Progress 

Finding 8 – We recommend that BCPS implement appropriate database monitoring controls over the aforementioned critical systems. Specifically, we recommend that BCPS

a. log all significant database security, audit related event, and processing activities, included direct changes to critical database tables, and generate reports that include this related database activity(repeat)Resolved b. ensure that individuals perform regular, independent documented reviews of the aforementioned reports and retain the information for reference purposes(repeat)

Resolved

c. restrict assignment of critical database administration roles to only those personnel requiring such access fortheir job responsibilities (repeat)Resolved

Finding 9 – We recommend that BCPS

a. relocate all publicly accessible servers to a separate protected network zone to limit security exposures to the internal network segment (repeat) Resolved

Baltimore County Schools cyber-security lapse may be broader than originally announced

BALTIMORE COUNTY, Md. (WBFF) - The cyber-security lapse made public this week by Baltimore County Public Schools may include more people than originally announced.

BCPS said Wednesday approximately 2,500 employees were involved in an incident involving personal information exposed on an internal website.

However, FOX45 News has spoken to six people who received letters related to personal information being involved in the matter.

None of them say they have ever been employed by Baltimore County Public Schools...

https://foxbaltimore.com/news/local/baltimore-county-schools-cyber-security-lapse-may-be-broader-than-originally-announced?fbclid=IwAR1FjqfphS6MBR8TYFDVMRmA9VWgvO8Zwuf4ihuGfEzndMrEh7ml6wmrBNg

With data presumed unrecoverable, Baltimore County Schools scramble to recover from cyber attack

 

With student transcripts, ID numbers, state test scores and more apparently destroyed, the hackers’ stranglehold on student data is far worse that school officials have acknowledged

Baltimore County Schools won praise for restarting student learning after last month’s cyber attack. But behind the scenes, the system is still reeling from the assault, including its devastating impact on students’ educational records.

Some student records are “presumed completely unrecoverable,” a Baltimore County Public Schools (BCPS) employee with information about the attack’s impact told The Brew.

“SIS [the Student Information System] is toast,” said the employee, who spoke under the condition of anonymity...

...It was a fast comeback for the district, but numerous practical problems remained, among them a complication for school staff who are required by law to report suspected child abuse to authorities.

With student directory information missing – coupled with staff working from home – employees have found themselves scrambling to obtain phone numbers and addresses for the children they are required to help...

https://www.baltimorebrew.com/2020/12/18/with-data-presumed-unrecoverable-baltimore-county-schools-scramble-to-recover-from-cyber-attack/

FBI PSA: EDUCATION TECHNOLOGIES: DATA COLLECTION AND UNSECURED SYSTEMS COULD POSE RISKS TO STUDENTS

The FBI is encouraging public awareness of cyber threat concerns related to K-12 students. The US school systems’ rapid growth of education technologies (EdTech) and widespread collection of student data could have privacy and safety implications if compromised or exploited...


https://www.ic3.gov/media/2018/180913.aspx