According to an October 27, 2026 report by the Center for Internet Security (CIS) just over 50% of schools or school districts report dealing with a cybersecurity incident in the last year. About a third of them reported a cyber incident that impacted school operations. The report also said that stealing credentials is becoming an increasingly common tactic among cyber criminals, with 87% of K-12 school leaders reporting that phishing or email compromises are among the top cyber incidents impacting their schools and school districts.
CIS runs the Multi-State Information Sharing & Analysis Center (MS-ISAC) and during the 2025-26 school year, over 11,600 K-12 cybersecurity incidents needed escalation and response among the 1,764 K-12 organizations using one or more of MS-ISAC’s services. In addition, 13% of schools or school districts receiving MS-ISAC monitoring services experienced a credential compromise or exposure.
For more from K-12 Dive, click here.