Louisiana K-12 Cybersecurity

Louisiana holds a unique place in the history of K-12 cybersecurity as the first state to declare a state of emergency in response to cyberattacks on school districts. That landmark response demonstrated both the severity of cyber threats facing schools and the potential of coordinated state-level action to protect educational communities. Today, Louisiana continues to evolve its approach to school cybersecurity, building on hard-won lessons from multiple major incidents while developing education programs that prepare the next generation for careers in the field.

Louisiana's Historic Cybersecurity Emergency

In July 2019, a coordinated ransomware attack struck five Louisiana school districts simultaneously, infecting systems and threatening to bring down additional districts. In response, the Governor issued a statewide emergency declaration — the first ever issued by a U.S. state specifically in response to a cyberattack. This unprecedented action activated critical state resources:

• GOHSEP activation: The Governor's Office of Homeland Security and Emergency Preparedness (GOHSEP) activated its Crisis Action Team and Emergency Services Function-17, a newly created cybersecurity response capability
• Louisiana National Guard: Cybersecurity specialists from the National Guard were deployed to assist affected school districts with system recovery and threat containment
• Louisiana State Police: State Police provided investigative and forensic support to identify the attackers and assess the scope of the breach
• Office of Technology Services: State technology staff provided direct technical assistance to help districts rebuild and secure their systems

The emergency declaration established a model that other states have since studied and adapted. It demonstrated that cyberattacks on schools should be treated with the same urgency as natural disasters, warranting coordinated state-level response capabilities.

Ongoing Cyber Threats to Louisiana Schools

The 2019 emergency was not an isolated event. Louisiana school districts have continued to face cyber threats, with several incidents highlighting persistent vulnerabilities:

Ransomware and Data Exposure

Multiple Louisiana parishes have experienced ransomware attacks in the years since the initial emergency. In one significant case, a school district waited five months to notify individuals that their Social Security numbers and other sensitive information had been made public following a ransomware attack. This delayed notification underscored the critical importance of having clear incident response plans with defined notification timelines.

Phishing Campaigns

Louisiana school staff and parents are frequently targeted by phishing emails that impersonate district administrators, the Louisiana Department of Education, and educational technology vendors. The state's 69 parish-based school systems create a large target surface, and attackers exploit the decentralized nature of Louisiana's education system to craft district-specific phishing campaigns.

Hurricane-Related Vulnerabilities

As a state frequently impacted by hurricanes, Louisiana faces unique cybersecurity risks during and after storm events. Schools serve as emergency shelters, emergency communications increase dramatically, and cybercriminals exploit the chaos to launch phishing attacks impersonating FEMA, insurance companies, and school officials. During recovery periods, when IT resources are stretched thin and backup systems may be compromised, districts are especially vulnerable to attack.

Louisiana's Cybersecurity Framework

Louisiana Cybersecurity Commission

Following the 2019 emergency, Louisiana established the Louisiana Cybersecurity Commission, a statewide partnership bringing together key stakeholders from the public sector, private industry, academia, and law enforcement. The Commission coordinates cybersecurity strategy across state government, including guidance and resources for K-12 school districts.

Incident Reporting Resources

The Governor's Office provides cybersecurity incident resources that include reporting procedures, contact information for state cybersecurity agencies, and guidance for organizations experiencing cyber incidents. School districts can use these resources to coordinate response efforts with state authorities.

State-Level Coordination

Louisiana's approach to K-12 cybersecurity emphasizes coordination between multiple state agencies:

• Louisiana Department of Education (LDOE): Provides policy guidance on student data privacy and technology use in schools
• Office of Technology Services (OTS): Offers technical resources and cybersecurity guidance to state entities including school districts
• GOHSEP: Maintains the Emergency Services Function-17 for cybersecurity incident response, available to support school districts during significant events
• Louisiana State Police Cyber Crime Unit: Investigates cybercrimes affecting schools and provides forensic analysis during breach investigations

Cybersecurity Education in Louisiana

Louisiana has invested in building a pipeline of cybersecurity-aware citizens and professionals through K-12 and higher education programs.

University Programs

• Louisiana State University (LSU): LSU's Center for Computation and Technology and Department of Computer Science offer cybersecurity programs and community outreach. LSU has been designated a National Center of Academic Excellence in Cyber Defense by the NSA and DHS
• University of Louisiana at Lafayette: Offers cybersecurity degree programs and hosts outreach events for K-12 students in the Acadiana region
• Louisiana Tech University: Located in Ruston, Louisiana Tech's Cyber Engineering program provides advanced cybersecurity education and K-12 outreach in north Louisiana
• Southern University: Offers cybersecurity programs that serve Louisiana's HBCU community and contribute to diversity in the cybersecurity workforce

K-12 Programs and Competitions

• CyberPatriot: Louisiana schools participate actively in the national cyber defense competition, with teams across urban and rural parishes. JROTC programs at Louisiana high schools are particularly strong CyberPatriot participants
• Cyber.org: As a nationally available free curriculum provider, Cyber.org offers Louisiana teachers access to K-12 cybersecurity lesson plans, the Cyber.org Range virtual lab environment, and professional development training
• GenCyber Camps: Louisiana universities have hosted NSA/NSF-funded GenCyber summer camps for students and teachers, providing intensive cybersecurity education at no cost to participants

Lessons Learned from Louisiana's Experience

Louisiana's cybersecurity journey offers critical lessons for school districts and state governments everywhere:

1. Treat cyberattacks like natural disasters: Louisiana's emergency declaration model proved that activating state emergency response resources for cyber incidents is both appropriate and effective. School districts should not face sophisticated adversaries alone
2. Speed of notification matters: The five-month notification delay in one parish's ransomware case caused significant community backlash. Clear, pre-established notification timelines protect both families and institutional trust
3. Coordination saves districts: The quick response to the 2019 attacks prevented the ransomware from spreading to additional districts. Information sharing between parishes and state agencies was crucial to containment
4. Rural districts need support: Many Louisiana parishes are rural with limited IT resources. State-level coordination and support programs are essential to ensure that small, under-resourced districts are not left defenseless
5. Recovery is expensive and slow: Even after the immediate emergency passed, affected Louisiana districts spent months rebuilding systems, replacing equipment, and restoring data. Prevention is far more cost-effective than recovery
6. Hurricane season compounds risk: Districts must account for natural disaster scenarios in their cybersecurity planning, recognizing that storm response creates unique vulnerabilities that attackers will exploit

What Louisiana Parents Should Know

• Louisiana has experience: Your state has dealt with more school cyberattacks than most, and has built response capabilities as a result. Know how your parish school system communicates during cybersecurity incidents
• Watch for phishing: Be cautious of emails claiming to be from your parish school district, especially during hurricane season or other emergency situations. Verify unexpected communications through known phone numbers
• Secure school devices at home: If your child has a school-issued device, ensure your home Wi-Fi is properly secured with a strong password and current firmware. Keep the device updated and report any unusual behavior
• Ask about data protection: Contact your parish school board to learn what student data is collected, who has access to it, and what protections are in place
• Report incidents: If you discover a potential data exposure or receive suspicious communications related to your school district, report it immediately to the school and the Governor's Office cybersecurity resources page

What Louisiana Educators Should Know

• Know your district's incident response plan: Understand exactly what to do and who to contact if you encounter suspicious activity on school systems. Louisiana's ESF-17 can be activated for significant incidents
• Complete cybersecurity training seriously: Given Louisiana's history of school cyberattacks, awareness training is not just compliance — it is a critical defense measure. Pay attention to current phishing techniques being used against schools
• Use free curriculum resources: Cyber.org provides free cybersecurity curricula that Louisiana teachers can integrate into STEM, CTE, and general education courses
• Encourage student participation: Promote CyberPatriot, GenCyber camps, and university cybersecurity programs to students. Louisiana needs more cybersecurity professionals, and early exposure builds the pipeline
• Plan for hurricane season: Develop classroom and communication backup plans that account for the increased cybersecurity risks during storm events. Have offline copies of essential materials ready