Five cyber incidents impact K-12 schools each week, with ransomware disrupting learning nationwide. Yet the real risk comes from a few 3rd-party vendors that districts rely on for critical operations—a risk made clear by the 2024 PowerSchool data extortion. This session will unpack how federal, state, and local leaders mobilized during the crisis and share steps to protect students and teachers.