Schools under cybersecurity protocol

By 
Sheila Smith
Thursday, August 1, 2019

Governor declares emergency following attack

Following cyber attacks on four school systems in Louisiana, districts this week are under a state of emergency that has left them without access to online information and programs.

As of Wednesday morning, school systems in Morehouse, Sabine and Tangipahoa parishes and the City of Monroe have experienced what Gov. John Bel Edward’s office labeled “severe, intentional cybersecurity breaches.” These threats, Edwards stated, could be ongoing.

Jeff Davis Parish Superintendent of Schools Kirk Credeur said districts impacted are essentially having all of their system information held for ransom.

“As I understand, these districts have pretty much been locked out of their information until ransom has been paid to have it returned,” Credeur said. “Thankfully, Jeff Davis has not been a victim but along with all other districts in the state, we are carefully going through a multi-phase process to get our system running again, going step-bystep to ensure security.”

“Thankfully Jeff Davis has not been a victim, but along with other districts in the state, we are carefully going through a multi-phase process to get our system running again, going step-by-step to ensure security.”
– Superintendent Kirk Credeur

School systems were ordered Tuesday to sever internet connectivity to begin safety precautions. This impacted phone services because the district utilizes Voice Over IP phone lines.

Wednesday morning, phone lines were operating but still experiencing issues such as calls being disconnected. Employees had access to email but no other online services.

“This will cause some issues this week as we go through the security process,” Credeur said. “People might have trouble trying to call schools or the school board office. Employees are at school campuses so people can go to those campuses, to speak to someone if needed.”

Student registration is ongoing. While schools will record registration information, however, Credeur said that information cannot be logged into the district’s system until online services are fully restored.

“We have the best tech employees in the state and I am confident our system will be safe,” he said. “But this process might impact work teachers are trying to do to prepare for the new year. If we get everything back up this week, there should be little to no impact on the start of school.”

Had an attack or the state of emergency taken place during the school year, Credeur said the situation could have been disastrous.

“Everything we do is Internet-based,” he said. “We log onto state web sites to access curriculum materials for teachers and students. Videos to assist teachers in enhancing instruction are accessed online.”

Credeur said cyber attacks like the ones being experienced in the four school systems are why the school board purchased cyber liability insurance in June. The policy through Lloyd’s of London protects the school board for costs incurred up to $1 million per claim for network security liability, privacy liability and regulatory fines, as well as $250,000 in coverage for cyber crime claims. This policy costs $11,494 annually and includes a $25,000 deductible.

At a June meeting, Technology Coordinator Laurie Duhon said such liability insurance is now a necessity.

“On a daily basis, we face attempted attacks,” Duhon said. “Fortunately our filters catch these threats and we follow procedures to protect ourselves. But these scams are becoming more prevalent.”