Cyber Preparedness: Protecting Students from Digital Dangers

Troy Lunt, Technology Director, Data Privacy Manager, Iron County School District

Troy Lunt, Technology Director, Data Privacy Manager, Iron County School District

In the field of K-12 education, the emphasis on student safety and data privacy is a constant priority. While educational trends and programs may come and go, the commitment to protecting students remains a priority and our primary goal. This dedication is evident in the nature of district operations: annual training sessions, monthly emergency drills, and the daily decisions that school leaders make. This consistent effort is preparation for potential crises (that may never happen). However, when a real threat emerges, this preparation is what enables a rapid and effective response.

The importance of student safety is a belief shared by parents and educators alike. This group consensus ensures that student protection, including the oversight of student data, receives continuous support. This is also reflected in the federal laws that govern K-12 education. Laws such as the Family Educational Rights and Privacy Act (FERPA) and the Children’s Internet Protection Act (CIPA) set a high standard for how school districts must handle student information. These federal rules, along with state and local policies, form the necessary structure for district compliance. They provide the framework for ongoing staff training, but the effectiveness of these policies depends on the awareness and actions of every person in the greater school community.

Digital Threat Enters the Classroom

The digital age has introduced new risks into the educational environment. Online platforms, while offering learning opportunities, can also create pathways for danger. A few years ago, a local school district saw this firsthand when introducing a program to teach students about computer coding. The program had a feature that permitted students to chat with one another; to collaborate and share their projects.

“This group consensus ensures that student protection, including the oversight of student data, receives continuous support”

A student, using this program, connected with another user they believed to be a student (but would soon prove to be an imposter). In less than an hour, the student had shared their personal information, including account credentials, passwords and even their phone number. The student was then manipulated into phone calls with this individual. Unbeknownst to the student's family or school staff, the person had already scheduled an in-person meeting with the child. This individual had used the personal information to convince the student that there would be consequences if they did not meet.

Coordinated Response

The student's behavior changed noticeably, which drew the mother's attention. Sensing a problem, the mother began asking questions. Despite the threats from the individual, the mother was able to gather information from her child, who had been acting out of fear. The mother understood the seriousness of the situation and immediately tried to access her child’s accounts, but the passwords had all been changed. She then contacted local banks and the school principal to report the incident.

This led to a quick and unified response. District technology leaders disabled all student account access. Local law enforcement worked with the School Resource Officer and district technology staff to review activity logs. With all communication channels to the student now cut off, more details about the online interaction came to light. The student described how the individual had started with friendly talk, which turned into demands against the student. In less than a day, the person was on a bus heading toward the city for this arranged meeting.

Using call tracking, geo-locating and details provided by the student, law enforcement was able to apprehend the person upon arrival. This success was a result of the preparedness of everyone involved. The mother's observation of her child's behavior and her knowledge of how to report the issue were key factors in preventing a tragic outcome.

Comprehensive Approach to Student Safety

This scenario is not an isolated event. Such incidents happen more often than people may realize. Without a complete commitment from school leaders to protect students, these situations can end in tragedy. The yearly training, monthly drills, and daily leadership assessments all play a part in preparing schools to handle these challenges. This preparedness ensures the best possible outcomes for student safety. In this specific case, the solution was to find a version of the coding program that did not require an internet connection, which eliminated the chat feature and the ability for students to communicate with others.

The idea that "it takes a village to raise a child" also applies to keeping students safe. It requires a collaborative effort from many different groups: committed district administrators, who set policies and lead resources; engaged school educators, who are on the front lines and can spot changes in student behavior; trained technology personnel, who are the first responders in a digital crisis; and involved parents, who are a crucial first line of defense at home. This collaborative network is essential for keeping students safe and their information protected.