Osseo district reports rise in credible cyber threats; officials say containment prevented harm

Anthony Pettis, executive director of technology, and Gerald Edwards, director of information systems and security, briefed the board on national K–12 cyber trends and the district’s defenses. Presenters said attackers are shifting tactics from malspam to malvertising and AI‑assisted impersonation, and that threat actors time attacks to high‑pressure academic windows. The district described multiple layers of monitoring (Microsoft Defender, Red Canary) and tabletop incident exercises to reduce downtime for critical services such as meal programs and transportation.

Gerald Edwards reported partner telemetry volumes and local incident counts: Red Canary reviews extensive telemetry (presenters cited roughly 30.9 terabytes of data) and this year investigated 461 incidents that produced 68 credible threats with a mix of high, medium and low severities. "The good thing is none of the 68 did anything to us," Edwards said, attributing that outcome to detection, containment and remediation procedures.

Board members asked whether any detections had direct operational impact; presenters said the 68 credible threats were contained and did not result in loss or service interruption. Staff also discussed rising student‑account compromises and the challenge of balancing stronger protections for student accounts with usability for younger learners. Presenters noted the technology levy funds many cybersecurity investments and said approximately $1,000,000 from the levy supports monitoring partnerships and staffing for security functions.