# K-12 Schools Report Cybersecurity Gaps

A joint CIS, MS-ISAC and CoSN report based on a survey of 426 K-12 technology leaders describes frequent cyber incidents, constrained security staffing and delayed cybersecurity work across school systems. Seventy percent of respondents said budget constraints delayed cybersecurity projects, investments or staffing; among respondents whose schools experienced incidents, 66% reported having only one or two dedicated cybersecurity staff. The report also warns that stolen staff credentials can enable attackers to move between districts. It announces no solicitation, award or dedicated funding opportunity.

- For contractors, the reported gaps point to potential demand for managed or shared threat monitoring, exposed-credential detection, identity and email security, incident response, phishing defenses, staff training and support developing AI-use policies.
- School and state procurement teams can use the findings to assess whether shared services and recurring state funding could address limited district staffing; the report does not identify a specific procurement vehicle or funding source.
- Because no procurement is announced, businesses should treat these findings as market context—not as an active bid—and align offerings with the staffing and budget constraints described.

**Jurisdictions:** sled
**Industries:** Education, Information Technology
**Topics:** Cybersecurity
**Published:** October 29, 2026

### Government Entities
- Saratoga Springs City School District
- San Joaquin County Office of Education

### Key Quotes
> We know that a single compromised account is all it takes to advance toward a more lucrative target.
> — Roy Park, Director of Cybersecurity & Digital Privacy

> I think most school districts are prepared to deal with just about any type of incident they may face, from weather events to pandemics to acts of violence. We’ve been training and drilling those for decades. But when it comes to a major cyber event, I worry that most of us are not well prepared.
> — Michael Patton, Superintendent of Saratoga Springs City School District

### Sources
- [More than half of K-12 schools reported cyber incidents amid staffing, funding gaps | StateScoop](https://statescoop.com/more-than-half-of-k-12-schools-reported-cyber-incidents-amid-staffing-funding-gaps) - StateScoop
- [Stolen staff logins are spreading attacks between K-12 school districts - Help Net Security](https://www.helpnetsecurity.com/2026/10/29/cis-k-12-cybersecurity) - Help Net Security
- [New report highlights cybersecurity challenges in K-12 schools | brief | SC Media](https://www.scworld.com/brief/new-report-highlights-cybersecurity-challenges-in-k-12-schools) - SC Media