Research: 67 separate ransomware attacks impacted 954 US schools and colleges in 2021, costing schools an estimated $3.5B+ in downtime
In 2021, 67 individual ransomware attacks affected 954 schools and colleges, potentially impacting 950,129 students. We estimate that these attacks …
Context & Ripple Effects
Comparitech's tally of 67 ransomware attacks hitting 954 US schools and colleges in 2021 is the latest entry in a dataset the firm has been building since before the pandemic: its 2020 study counted 77 attacks affecting over 1,740 institutions at roughly $6.6B in downtime, while Armor had already flagged over 500 schools hit in 2019. The 2021 figures — about $3.56B in downtime and roughly 950,000 students potentially affected — land below 2020's totals but confirm education as a recurring target rather than a one-year spike.
First-order effects
- Districts and colleges in the 2021 cohort absorb direct downtime costs — Comparitech's estimate puts the year's losses above $3.5B — with instruction, records systems, and payroll disrupted for the ~950,000 students whose schools were hit.
Second-order effects
- Boards and state education agencies now have three consecutive years of comparable loss data (2019–2021) to justify dedicated cybersecurity line items, shifting ransomware from an IT incident to a budgeting and insurance question for school administrators.
Third-order effects
- K12 SIX's later finding that K-12 attacks rose from 14 in 2016 to 69 in 2022 (a 393% increase) suggests the 2019–2021 wave was structural, not episodic — pointing toward sector-wide minimum security standards for schools akin to those imposed on other critical services.
The trend: US education is consolidating into a standing ransomware target class, with annual loss research from firms like Comparitech turning school cyberattacks into a measurable, budgetable line item.