K – 12 schools and colleges are a lucrative target for cybercrime groups due to the large attack surface, relaxed BYOD policies, and lack of investment in cybersecurity resources. Educational institutions collect and store a treasure trove of personally identifiable (PII) information, have financial information for tuition, and can serve as a jumping-off point for other sophisticated cyberattacks.