Cybersecurity Policy Report, K-12 Cybersecurity Legislation Offered in House, Senate, (Jul 24, 2026)
Legislation that would aim to improve the cybersecurity of K-12 schools, which have become frequent targets of ransomware attacks, has been reintroduced in the House and Senate.
The Enhancing K-12 Cybersecurity Act (HR 9918/S 5098) was offered in the House by Reps. Doris Matsui (D., Calif.) and Zach Nunn (R., Iowa) and in the Senate by Sens. Marsha Blackburn (R., Tenn.) and Mark Warner (D., Va.).
It would establish a cybersecurity incident registry at the Cybersecurity and Infrastructure Security Agency to collect reports submitted voluntarily regarding cyber attacks on K-12 schools.
It would also direct CISA to establish a K-12 Cybersecurity Technology Improvement Program administered through a public-private cybersecurity information-sharing group such as the Multi-State Information Sharing and Analysis Center (MS-ISAC).
“This approach will capitalize on the existing services and expertise of organizations like MS-ISAC and others to ensure maximum impact of funds,” the lawmakers said in a news release. The bill would authorize $10 million per year for fiscal years 2027 and 2028 to fund the technology improvement program.
“Federal cybersecurity officials have repeatedly warned that schools remain targets for ransomware and other malicious cyber activity because they often operate with limited cybersecurity personnel and budgets while maintaining large amounts of sensitive data,” the lawmakers noted in the news release.
“The Enhancing K-12 Cybersecurity Act would help schools better prepare for these threats by improving access to cybersecurity guidance and resources, strengthening national awareness of cyber incidents affecting schools, and expanding the tools and support available to help school systems,” they said.
“No family should have to worry that a cyberattack could expose a child’s personal information or disrupt their education. This bill gives schools the tools, training, and support they need to protect students’ data, help teachers keep classrooms running, and give administrators stronger resources to prevent and respond to cyberattacks,” Rep. Matsui said.
“Cyberattacks continue to grow in size, frequency, and complexity in critical U.S. institutions, including in America’s schools,” Sen. Blackburn said. “We must ensure that our education sector is equipped to address these threats and keep students’ personal information private. This bipartisan and bicameral legislation will improve the cybersecurity tracking system for schools and provide them with necessary training resources and best practices for prevention.”
The bill has been endorsed by the National Principals Association, National Association of Elementary School Principals, Council of Chief State School Officers, National Association of State Chief Information Officers, State Educational Technology Directors Association, and Consortium for School Networking (CoSN).
“Cybersecurity remains one of the most urgent technology challenges facing K-12 schools. School districts face increasingly sophisticated cyber threats that can disrupt learning, compromise student and personnel data, and strain already limited technology resources,” said Keith Krueger, CoSN’s chief executive officer.
“CoSN strongly supports the bipartisan Enhancing K-12 Cybersecurity Act because it will strengthen information sharing, improve understanding of the cyber threats facing schools, and expand access to the resources and expertise districts need to better protect their networks,” Mr. Krueger added.
Similar legislation introduced in 2020, 2021, and 2023 failed to advance (CPR, April 18, 2023).
MainStory: TopStory FederalLegislation DataSecurity