Email Test Finds More Than 50% of Kingston School District Employees Vulnerable to Phishing

Stu Sjouwerman | Feb 6, 2020

Meagher buildingMore than half of the people who have Kingston school district email accounts opened a potentially damaging phishing email sent to them by a firm that's helping the district gauge vulnerability to cyber attacks. Shaughnessy said he was one of the people who opened the email and clicked on the link.

“Emails [were] sent to people, trying to get them to click on it and then enter their password and that gives the attacker access into the system,” he said at Wednesday's board meeting. "... It happens that I was one of the people who clicked on the link.”

District Technology Director Gary Tomczyk said 770 email account holders did not open the email and 94 asked administrators if the email was valid.

Kingston school district officials said there have been recent successful cyber attacks against the nearby Livingston Manor, Monroe-Woodbury and Chester school districts.

Shaughnessy said the Kingston school district is working with BOCES in an effort to shore up cyber defenses. He said a firm called Checkpoint has been helping the BOCES Mid-Hudson Regional Information Center develop filtering and alert systems. New-school security awareness training could train your users to look out for suspicious emails that require to click on a link. 

Daily Freeman has the full story

Topics: Phishing

Discover Your Organization’s Phish-prone™ Percentage

Ninety-one percent of data breaches begin with spear phishing. Launch our Free Phishing Security Test for up to 100 users to uncover your team's vulnerability and see how your security posture stacks up against industry benchmarks.

Get Your Free Phishing Security Test

Secure the Digital Workforce: Human + AI

KnowBe4 empowers the human and AI workforce to make safer security decisions every day. Trusted by over 70,000 organizations worldwide, we help strengthen security culture and manage risk. Our comprehensive AI-driven platform includes awareness and compliance training, cloud email security, real-time coaching, crowdsourced anti-phishing, AI Defense Agents, agent security and more. As the only global security platform of its kind, KnowBe4 provides personalized content, tools, and techniques to keep the modern workforce safe from phishing, vishing, deepfakes, and emerging threats.

Get the latest insights, trends and security news. Subscribe to CyberheistNews.