Ransomware Attacks on Education Decline in 2024

Ransomware attacks against educational institutions worldwide decreased significantly from 188 in 2023 to 116 in 2024, marking a 38% decline, according to Comparitech. Despite this drop, these attacks compromised approximately 1.8 million records, with an average ransom demand of $847,000. While the total number of ransomware incidents worldwide was reported at 5,461, only 1,204 were confirmed by targeted organizations. Active ransomware groups such as RansomHub, LockBit, Medusa, and Play were responsible for many attacks, with RansomHub reportedly compromising over 200 organizations since its emergence. The report highlighted that many attacks remain unconfirmed due to organizations' choices not to disclose them or misinformation from the attackers. As ransomware continues to pose a threat, the U.S. Department of Education has initiated efforts to enhance cybersecurity measures in response to the increasing risks faced by K-12 schools.