School Cyber Attack Simulation

Cyber Crisis Response Training

Learn how to respond to real cybersecurity incidents!

0:00
Phase 1 of 4
Day 1 - 8:00 AM

Initial Detection

Your school's computer network has been compromised! Students can't access their online assignments, the library computers show a strange skull animation, and teachers report that student grade records are locked. A message on screen demands 500 CyberCoins to unlock everything. The school's IT person is panicking!

Critical Information

  • All school computers show a ransomware lock screen
  • Student grade records and assignments are inaccessible
  • The school Wi-Fi is still working but internet is very slow
  • Some students report their personal devices acting strange
  • The attack happened overnight when no one was around

Discussion Questions

  1. 1What should be the FIRST thing we do right now?
  2. 2Who needs to know about this attack immediately?
  3. 3Should students keep using the school Wi-Fi on their phones?

Who Should Be Involved?

Select the people who need to be contacted in this phase:

Selected: 0 stakeholders

Facilitator Notes

Encourage youth to think about who has authority to make decisions. Discuss why we should NEVER pay ransoms. Focus on communication - who needs to know what and when?