Lancaster IT outlines districtwide multi-factor authentication rollout to curb phishing and credential theft

District IT staff presented an overview of district technology assets and a planned multi-factor authentication (MFA) rollout intended to reduce account compromise and follow-on phishing attacks.

IT said the district manages roughly 600,000 accounts, about 30,000 Chromebooks and large numbers of other devices and servers, making K–12 operations attractive to threat actors. The presentation cited sector research that most K–12 ransomware incidents in 2024 stemmed from compromised credentials or exploited vulnerabilities, and it described how MFA (a combination of knowledge, possession and inherence factors) reduces risk even when passwords are stolen.

IT recommended Duo (Cisco) for enrollment and described three primary authentication options: hardware security keys, Duo Push via a mobile app, and rotating passcodes generated by the Duo mobile app (which work without cell coverage). IT noted a bypass code capability to assist staff in exceptional cases and said an enrollment email would be sent to staff ahead of a prompting/enforcement date planned to begin on the 12th of the rollout month. Board members asked about Google targeting; IT responded that all organizations are targeted and that protecting the district’s identity provider (Google single sign-on) will reduce risk across many platforms.

What’s next: district staff said enrollment communications to sites would begin immediately and that district office and initial-phase staff will be among the first groups prompted to enroll. Hardware tokens were available for distribution at the meeting.