CNUSD Cyber Insights

Current Watch Level

Elevated

Significant risk. Heightened phishing campaigns or known threats targeting K-12.

Last updated: May 26, 2025

What does this mean for you?

The Watch Level reflects the current cybersecurity threat climate relevant to K-12 school districts, including CNUSD. It's informed by threat intelligence feeds, advisories from the Multi-State Information Sharing and Analysis Center (MS-ISAC), and our own monitoring.

At Elevated, we recommend the following:

  • Be extra cautious with unexpected emails, even from familiar senders.
  • Verify any requests for credentials or sensitive information by phone before acting.
  • Ensure your district account has 2-step verification enabled.
  • Review recent account activity for unfamiliar sign-ins.
  • Report anything suspicious immediately — don't wait.

The four Watch Levels

The Watch Level is a single value that gives the CNUSD community a shared understanding of the current threat environment without requiring anyone to read a threat intelligence report.

Guarded

General risk of increased hacking, phishing, or cyberattack activity.

Elevated

Current

Significant risk. Heightened phishing campaigns or known threats targeting K-12.

High

High risk. Active threats targeting districts similar to CNUSD. Stay alert.

Severe

Severe risk. Credible, specific threat to district systems. Follow IT guidance immediately.

How and when it's updated

The Watch Level is reviewed regularly by the CNUSD Technology & Information Services team. Changes are made in response to:

  • Advisories from the MS-ISAC and CISA targeting K-12 or California school districts
  • Active incidents or near-misses reported within the district
  • Significant changes in the broader threat landscape (e.g., a major ransomware campaign targeting schools)

When the level changes, the updated date on this page and the banner across the site will reflect the new information. Staff are not individually notified of routine level changes — significant escalations (High or Severe) may trigger direct communication from IT Security or district leadership.

Questions about the current level can be directed to cyber-reporting@cnusd.k12.ca.us.