New York Schools Hit Hard by 72% Rise in Cyber Incidents

Got story updates? Submit your updates here. ›

The number of reported data incidents affecting schools across New York State surged by 72% in 2025, reaching a total of 662 incidents compared to just 71 in 2021. The rise in cyber threats, including accidental data sharing and the high-profile PowerSchool breach on Long Island, underscores the challenges schools face in securing sensitive student and staff information amid tight budgets and complex third-party relationships.

Why it matters

Schools often operate on limited budgets, making it difficult for them to invest in robust cybersecurity measures. This leaves them vulnerable to attacks, as cybercriminals target educational institutions due to the vast amounts of sensitive data they possess. The involvement of third-party contractors in many incidents also highlights the complexities schools face in maintaining security oversight.

The details

In 2025, a total of 662 data incidents were reported statewide, a 72% increase from 2021. Approximately 341 of these incidents were attributed to the accidental sharing of private information, raising concerns about staff and student training. The PowerSchool breach in late 2024 impacted at least nine districts and an educational agency on Long Island, with repercussions continuing into the following year.

• In 2021, there were 71 reported data incidents affecting New York schools.
• In 2025, the number of reported data incidents increased to 662, a 72% surge from 2021.
• The PowerSchool breach occurred in late 2024 and impacted multiple districts and agencies on Long Island.

What’s next

Schools, parents, and students must work together to ensure data protection. This includes reevaluating AI programs, updating security systems, and implementing clear incident response plans. Staff and student training is crucial to identify threats and limit the spread of ransomware and phishing campaigns.