As K-12 schools increasingly adopt new education technology (EdTech) innovations into the classroom and explore artificial intelligence (AI) to automate and enhance administrative functions, they have become prime targets for cybercriminals. K-12 schools have become increasingly attractive targets for cybercriminals, with attacks against educational institutions rising dramatically in recent years. When attacks occur, they can disrupt educational continuity, compromise sensitive information, damage institutional reputation, and potentially expose schools to legal liability. The threat actors targeting schools range from opportunistic criminals seeking quick financial gain to sophisticated groups that focus specifically on educational institutions. This secretary has inadvertently exposed the student’s sensitive information and could cause serious harm to the student if that information were to be made public.