NYS School Data: Cyber Incidents Surge 72%, Long Island Hit Hard

Tight budgets and third-party risks leave schools vulnerable to escalating cyber threats

Apr. 10, 2026 at 8:54am

Got story updates? Submit your updates here. ›

A highly detailed, glowing 3D illustration of a school's digital infrastructure, with servers, cables, and other tech elements illuminated by vibrant neon lights, conveying the growing cybersecurity challenges facing educational institutions.As cyber threats escalate, schools' digital backbones glow with the weight of securing sensitive student and staff data.NYC Today

The alarming rise in data incidents affecting schools across New York State serves as a stark reminder of the vulnerabilities that exist within our educational institutions. With a 72% increase in reported incidents in 2025, it's clear that the cyber threat landscape is evolving rapidly, and schools are struggling to keep up.

Why it matters

Schools often operate on tight budgets, which can limit their ability to invest in robust cybersecurity measures. This leaves them vulnerable to attacks, as they become an attractive target for cybercriminals due to their vast amounts of sensitive data. The involvement of third-party contractors in many incidents also underscores the complexities schools face in maintaining security oversight.

The details

In 2025, a staggering 662 data incidents were reported statewide, compared to just 71 in 2021. Approximately 341 data breaches were attributed to accidental sharing of private information, raising concerns about staff and student training. The PowerSchool breach in late 2024 impacted at least nine districts and an educational agency on Long Island, with repercussions continuing into the following year.

  • In 2025, 662 data incidents were reported statewide, a 72% increase from 2021.
  • The PowerSchool breach in late 2024 impacted at least nine districts and an educational agency on Long Island.

The players

New York State

The state where the alarming rise in data incidents affecting schools has occurred.

PowerSchool

An educational technology company whose breach in late 2024 impacted multiple districts and agencies on Long Island.

Got photos? Submit your photos here. ›

What’s next

Schools, parents, and students must work together to ensure data protection. This includes reevaluating AI programs, updating security systems, and implementing clear incident response plans. Staff and student training is crucial to identify threats and limit the spread of ransomware and phishing campaigns.

The takeaway

This situation demands immediate attention and proactive measures to protect our educational institutions and the sensitive data they hold. By taking these steps, we can better safeguard our schools and the communities they serve.