MATSUI INTRODUCES BIPARTISAN LEGISLATION TO STRENGTHEN CYBERSECURITY IN K-12 SCHOOLS

Today, Representatives Doris Matsui (D-CA) and Zach Nunn (R-IA), and Senators Mark Warner (D-VA) and Marsha Blackburn (R-TN) reintroduced the Enhancing K-12 Cybersecurity Act, bipartisan and bicameral legislation to help schools defend against ransomware, data breaches, and other cyberattacks that can expose students' information, disrupt classroom learning, and strain already limited school resources.

"When I thought about my own grandchildren going to school, I wanted what every parent and grandparent wants: for them to be safe and focused on learning," said Congresswoman Matsui. "No family should have to worry that a cyberattack could expose a child's personal information or disrupt their education. This bill gives schools the tools, training, and support they need to protect students' data, help teachers keep classrooms running, and give administrators stronger resources to prevent and respond to cyberattacks."

"As a 20-year Air Force intelligence officer and former White House National Security Council member, I've spent my whole career tracking threats like these," said Congressman Nunn. "Now they're hitting our classrooms - shutting schools down and putting Iowa students' personal information in the wrong hands. No school should have to fight that alone. Our bipartisan bill gives K-12 schools across the country the backup they need to stop these attacks and protect their students."

"As cyberattacks grow more frequent and sophisticated, it's our responsibility as lawmakers to ensure our schools have the tools and resources needed to protect students, parents, educators, and their sensitive information from being compromised," said Senator Warner. "Schools should be focused on teaching young people - not worried about fending off ransomware attacks or recovering from cyber incidents. I'm proud to reintroduce this legislation that would help school districts strengthen their cyber defenses, improve coordination with federal experts, and better prepare for the growing threats facing classrooms across the country."

"Cyberattacks continue to grow in size, frequency, and complexity in critical U.S. institutions, including in America's schools," said Senator Blackburn. "We must ensure that our education sector is equipped to address these threats and keep students' personal information private. This bipartisan and bicameral legislation will improve the cybersecurity tracking system for schools and provide them with necessary training resources and best practices for prevention."

Cyberattacks targeting K-12 schools continue to grow in both frequency and sophistication, exposing sensitive student information, disrupting classroom learning, and forcing schools to divert limited resources away from educating students. According to the 2025 Center for Internet Security (CIS) K-12 Cybersecurity Report, 82% of more than 5,000 K-12 organizations experienced cyber threat impacts between July 2023 and December 2024, underscoring the growing challenge schools face as they rely more heavily on digital technologies.

Federal cybersecurity officials have repeatedly warned that schools remain targets for ransomware and other malicious cyber activity because they often operate with limited cybersecurity personnel and budgets while maintaining large amounts of sensitive data. The Enhancing K-12 Cybersecurity Act would help schools better prepare for these threats by improving access to cybersecurity guidance and resources, strengthening national awareness of cyber incidents affecting schools, and expanding the tools and support available to help school systems.

The Enhancing K-12 Cybersecurity Act would:

Establish a School Cybersecurity Information Exchange

Directs the Cybersecurity and Infrastructure Security Agency Director to establish a Cybersecurity Information Exchange to disseminate information, best practices, and grant opportunities to improve cybersecurity.

Create a Cybersecurity Incident Registry

Establishes a Cybersecurity Incident Registry within CISA to track incidents of cyberattacks on elementary and secondary schools. Information submitted to the Registry is strictly voluntary and will help improve data collection to coordinate activities related to the nationwide monitoring of the incidence and financial impact of cyberattacks.

Launch a K-12 Cybersecurity Technology Improvement Program

Directs CISA to establish the K-12 Cybersecurity Technology Improvement Program to be administered through an information and analysis organization to deploy cybersecurity capabilities that will help address cybersecurity risks and threats to information systems of K-12 schools. This approach will capitalize on the existing services and expertise of organizations like MS-ISAC & others to ensure maximum impact of funds. The legislation authorizes $10 million annually for fiscal years 2027 and 2028 to fund the Technology Improvement Program.

Full text of the Enhancing K-12 Cybersecurity Act can be found HERE.

The Sacramento County Office of Education, National Principals Association, National Association of Elementary School Principals, Council of Chief State School Officers, National Association of State Chief Information Officers, State Educational Technology Directors Association, and Consortium for School Networking endorsed the legislation.

"As a local educational agency that provides internet connectivity to 250,000 students across California, the Sacramento County Office of Education sees firsthand the growing threat that cyberattacks pose to student information, instructional continuity, and school operations," said Jerry Jones, executive director of Technology Resources for the Sacramento County Office of Education."This bill would provide much-needed, practical support to schools by expanding access to K-12-specific cybersecurity guidance, training, cybersecurity information, funding opportunities, and effective tools and services. Its emphasis on improving coordination, strengthening protections against ransomware and other cyber threats, and helping schools learn from cyber incidents recognizes that schools should not have to face these increasingly sophisticated attacks alone. I strongly support this important legislation and its commitment to strengthening the security and resilience of our nation's schools."

"Schools are increasingly at risk from cybersecurity threats. NAESP is proud to endorse the Enhancing K-12 Cybersecurity Act, a bill which would give our members practical tools, information, and resources from the Cybersecurity and Infrastructure Security Agency (CISA) to help pre-K-8 school leaders protect student data and privacy and to avoid costly school disruptions," said L. Earl Franks, executive director of the National Association of Elementary School Principals. "We commend Representatives Matsui and Nunn and Senators Blackburn and Warner for their bipartisan leadership on this critically important issue."

"Cybersecurity remains one of the most urgent technology challenges facing K-12 schools. School districts face increasingly sophisticated cyber threats that can disrupt learning, compromise student and personnel data, and strain already limited technology resources," said Keith Krueger, CEO of the Consortium for School Networking (CoSN). "CoSN strongly supports the bipartisan Enhancing K-12 Cybersecurity Act because it will strengthen information sharing, improve understanding of the cyber threats facing schools, and expand access to the resources and expertise districts need to better protect their networks. We applaud the bill's bicameral and bipartisan sponsors for their leadership on this important issue."

"SETDA strongly supports the bipartisan Enhancing K-12 Cybersecurity Act because it improves collaboration, increases visibility into cyber incidents affecting schools, and expands access to the tools and technical assistance states and districts need to protect students and critical education systems," said Dorann Avey, SETDA Board Chair. "We commend Representative Matsui and Representative Nunn for their leadership and urge Congress to advance this vitally important legislation."