Email Test Finds More Than 50% of Kingston School District Employees Vulnerable to Phishing

Stu Sjouwerman | Feb 6, 2020

Meagher buildingMore than half of the people who have Kingston school district email accounts opened a potentially damaging phishing email sent to them by a firm that's helping the district gauge vulnerability to cyber attacks. Shaughnessy said he was one of the people who opened the email and clicked on the link.

“Emails [were] sent to people, trying to get them to click on it and then enter their password and that gives the attacker access into the system,” he said at Wednesday's board meeting. "... It happens that I was one of the people who clicked on the link.”

District Technology Director Gary Tomczyk said 770 email account holders did not open the email and 94 asked administrators if the email was valid.

Kingston school district officials said there have been recent successful cyber attacks against the nearby Livingston Manor, Monroe-Woodbury and Chester school districts.

Shaughnessy said the Kingston school district is working with BOCES in an effort to shore up cyber defenses. He said a firm called Checkpoint has been helping the BOCES Mid-Hudson Regional Information Center develop filtering and alert systems. New-school security awareness training could train your users to look out for suspicious emails that require to click on a link. 

Daily Freeman has the full story

Topics: Phishing

Discover Your Organization’s Phish-prone™ Percentage

Ninety-one percent of data breaches begin with spear phishing. Launch our Free Phishing Security Test for up to 100 users to uncover your team's vulnerability and see how your security posture stacks up against industry benchmarks.

Get Your Free Phishing Security Test

Secure the Digital Workforce: Human + AI

KnowBe4 empowers the modern workforce to make smarter security decisions every day. Trusted by more than 70,000 organizations worldwide, KnowBe4 is the pioneer of digital workforce security, securing both AI agents and humans. The KnowBe4 Platform provides attack simulation and training, collaboration security, and agent security powered by AIDA (Artificial Intelligence Defense Agents) and a proprietary Risk Score. The platform leverages 15 years of behavioral data to combat advanced threats including social engineering, prompt injection, and shadow AI. By securing humans and agents, KnowBe4 leads the industry in workforce trust and defense.