Feds warn on ransomware threat to schools
The FBI's cyber unit and the Department of Education cautioned schools nationwide of growing ransomware threat.
Hackers have tried to sell over 100 million private records extorted from almost 100 schools and businesses as of the end of last year after escalating, sometimes violent, threats, according to an industry warning issued Jan. 31 by the FBI and the Department of Education inspector general.
Attacks by a hacker group called TheDarkOverlord, described in the warning as "a loosely affiliated group of highly trained hackers," have recently focused threatening cyberattacks on schools and even students.
As of this January, the group was responsible for 69 intrusions into schools and other businesses and the attempted sale of almost 100 million records containing personally identifiable information.
The group pilfers records from schools and threatens to release them if it is not paid a ransom. According to the notice, 200,000 records on more than 7,000 students have been released by TheDarkOverlord. Additionally, the group has threatened school shootings in text messages and emails sent directly to students.
In a recent incident, TheDarkOverlord threatened to release sensitive behavioral reports and private health data on students.
The FBI said it does not recommend schools make a ransom payment when they're threatened, as it does not guarantee they will regain access to data. Instead, the FBI wants schools targeted by the hacker group to contact law enforcement. Additionally, schools must do a better job of protecting their networks and data, it said.