For K-12 districts
The first hour after an incident matters most — for students, families, and the school year.
HackFirstAid for Education walks K-12 districts through it in plain language, with no jargon, no procurement headaches, and a clear hand-off to your trustees. Free triage, 12 playbooks, and a US + Canada regulatory grid.
Built for K-12 public, charter, and private districts · Atlantic-Canadian roots, North-American practice · Higher ed, OT/SCADA, and non-security cyberbullying out of scope by design
Triage in under three minutes
Tell us what just happened. We'll point to the right playbook and the right regulators.
The free triage is always free — no signup, no email gate. Use it during an incident or run it as a tabletop with your team.
Open the triage
Answer 2–5 plain-language questions about what you're seeing in the district.
Get a printable plan
Matching playbook, first-hour actions, regulator hand-offs for your state or province.
Hand it to your team
Email to your superintendent, print for the board, or work straight from the screen.
Featured playbooks
Scenarios written for the way K-12 districts actually run.
SIS, LMS, lunch accounts, transportation, IEPs, state testing, board meetings — vocabulary that matches a district, not a corporate org chart.
Ransomware mid-school-day
Encryption hits during classroom delivery — transportation routing, lunch accounts, IEP accommodations, or state testing.
Open playbook
Student Information System compromise
PowerSchool, Aspen, Infinite Campus, Skyward, or Synergy account takeover, grade tampering, or credential-stuffing.
Open playbook
Teacher email / BEC
Compromised teacher mailbox — gradebook variant (transcripts) and the payroll-redirect variant (paycheck reroute).
Open playbook
Family communication after a breach
Templates by severity tier — SIS down one day, vendor PII breach, ransomware affecting operations, sextortion involving a student.
Open playbook
By vendor
Reporting paths for the platforms your district actually runs.
PowerSchool, Aspen, Infinite Campus, Skyward, Synergy, Canvas, Schoology, Google Workspace for Education, Microsoft 365 Education — vendor-specific escalation paired with the matching incident scenarios.
Free download
Put the first hour on paper before you need it.
A one-page checklist your superintendent, IT director, and board chair can keep at their desks. Plain language. No vendor pitch. Built specifically for K-12 districts.
Why HackFirstAid for Education
Built by someone who's actually been in your seat.
25+ years of incident response across the public sector. Founder of AtlSecCon. Atlantic-Canada based, working with US and Canadian districts. No vendor pitch, no fear marketing — just calm guidance for the worst morning of your year.
Procurement-friendly by design
Annual fiscal-year-aligned invoicing under most US K-12 single-quote thresholds. W-9 / BN ready. Sole-source justification template. NASPO ValuePoint and state co-op paths on request.
Procurement paperwork →The HackFirstAid family
One cyber-readiness stack. Five audiences.
K-12 districts sit at the operational layer. HackFirstAid also covers the personal lives of your staff and families, and the governance-layer oversight your board of trustees is responsible for.
Individuals & families
Individuals & families
hackfirstaid.com
Visit
Small & mid-sized business
Small & mid-sized business
business.hackfirstaid.com
Visit
Municipalities
Municipalities
municipal.hackfirstaid.com
Visit
You are here
K-12 districts
education.hackfirstaid.com
Boards & trustees
Boards & trustees
boards.hackfirstaid.com
Visit