2025 Cybersecurity Predictions for K-20 Education

• 01/30/25

"In 2025, we will continue to see a fundamental shift in the concept of personal data ownership, particularly in the government and public health sectors. There is growing recognition that personal data ultimately belongs to individual citizens, not to the institutions that collect or manage it, which is already driving changes and innovations in data management, security, and access control. Governments, especially in countries with socialized healthcare systems, are primed to lead the way in developing frameworks for citizen-controlled data. This trend will necessitate new approaches to data residency, privacy laws, and security protocols. While progress may be slower in larger, more complex systems like the U.S., this ongoing shift will have far-reaching implications in 2025 and beyond."
— Winston Chang, global public sector CTO, Snowflake

AI-fueled attacks will take cybersecurity defense to new fronts.

"In 2025, institutions will prioritize internal defenses and post-breach strategies over traditional perimeter security, recognizing that the fight against cyber attacks is shifting inward. Advanced attacks will increasingly target sectors like education, making data encryption and network segmentation essential components of resilient cybersecurity frameworks. As AI-fueled attacks grow more sophisticated, institutions will focus on limiting attackers' movements within networks, accepting that the perimeter can no longer be the sole line of defense." 
— Gary Barlet, public sector CTO, Illumio 

"2025 will likely see a continued rise in cybersecurity threats targeting K-12 public education systems. Ransomware attacks, data breaches, and phishing scams remain a significant concern. Our schools' increased reliance on remote learning and digital tools will open even more avenues for attack. To combat these threats, we must invest more in cybersecurity, including advanced firewalls, intrusion detection systems, and staff cybersecurity training. With attackers integrating AI and machine learning for more advanced cyber threats, we need to be even more vigilant in how we approach our cybersecurity solutions. As educational technology and AI evolve, so will the landscape of cybersecurity challenges in K-12 public education."
— Tim Klan, administrator of information and instructional technology, Livonia Public Schools

Critical workforce shortages will impact cybersecurity and competitiveness.

"As we enter the new year, we must recognize and act on the fact that without a robust education system preparing youth for tech-driven fields, our national security and competitiveness are at risk. Critical workforce shortages in AI, quantum computing, and biotechnology highlight the urgent need to invest in STEM and computer science education. States like Indiana, Ohio, and Colorado are leading the charge, creating career-connected pathways for students into high-demand industries. Their efforts should serve as a model nationwide. And we need further investment in education R&D to fuel new innovations in career-connected learning and pathways. Investing in tomorrow's workforce is not just a priority — it's a necessity. It’s time for all federal, state, and district leaders to rise to the challenge this year and secure our technological leadership for generations to come."
— Sara Schapiro, executive director, Alliance for Learning Innovation

Educators, students, and decision-makers will need upskilling to develop and use trustworthy AI.

"In education, we expect the start of a shift from traditional AI tools to agents. In addition, the mainstream use of AI technology with ChatGPT and OpenAI has increased the potential risk of shadow AI (the use of non-approved public AI applications, potentially causing concerns about compromising sensitive information). These two phenomena highlight the importance of accountability, data and IT policies, as well as control of autonomous systems. This is key mostly for education providers, where we think there will be greater attention paid to the AI guardrails and process. To be prepared, educators, students, and decision-makers at all levels need to be upskilled in AI, with a focus on AI ethics and data management. If we invest in training the workforce now, they will be ready to responsibly develop and use AI and AI agents in a way that is trustworthy."
— Justina Nixon-Saintil, vice president and chief impact officer, IBM