Daily News

Net Gain Edtech

A 5 minute newscast every business day summarizing the day’s most important edtech technology, policy and vendor developments. Tailored for K-12 district leaders.

Latest Episodes:

Coursera Stock Craters on Guidance Miss as E-Rate Deadline Hits Oct 30, 2026

Show notes

Coursera ($COUR) shares fell 25% today after the company's first full quarterly report since merging with Udemy showed slowing consumer growth and weak guidance. Revenue hit $377 million, up 94% year over year, but fourth-quarter revenue is expected to decline and the 2026 forecast was narrowed, prompting multiple analyst downgrades.

Today is the reply-comment deadline in a second FCC proceeding on E-Rate administration. New filing data shows nearly 99% of commenters want the program preserved, though they split on details like screen-time rules and oversight of funding consultants.

A group of suburban Kansas City districts, including Blue Valley, DeSoto, and Gardner-Edgerton, has asked the Kansas State Board of Education to let individual districts set their own instructional-technology rules instead of a single statewide policy, with a board decision expected in November.

The University of Oxford has begun a six-month study with England's Department for Education, Ofqual, and Oak National Academy on how pupil data can safely inform AI research and shape data-governance recommendations.

Stories & links:

1. "Coursera's Guidance Miss Triggers Analyst Downgrades" — https://markets.financialcontent.com/stocks/article/stockstory-2026-10-30-why-coursera-cour-shares-are-falling-today

2. "FCC's USAC Reform Docket Hits Reply-Comment Deadline" — https://www.fundsforlearning.com/news/commenters-say-keep-e-rate-they-split-on-the-details/

3. "Kansas City-Area Districts Push Back on Statewide Tech Policy" — https://www.kctv5.com/2026/10/30/kansas-board-education-is-looking-implement-new-policies-surrounding-technology-use-schools/

4. "Oxford, UK Education Department Launch Student-Data AI Study" — https://www.edtechinnovationhub.com/news/university-of-oxford-and-dfe-begin-six-month-study-into-student-data-use-in-ai

Brought to you by the Edsby student success platform for K-12.

Hijacked K‑12 Logins Used to Phish Staff at Other Districts Oct 29, 2026

Show notes

The U.S. Multi-State Information Sharing and Analysis Center says 800 K‑12 school organizations had staff credentials circulating on dark web marketplaces last school year, out of 6,000 member districts. Attackers aren't just logging in with stolen credentials - they're using one hijacked district email account to phish that account's contacts at other districts, with some attackers impersonating superintendents to commit fraud.

Some of the largest U.S. school districts are telling the Federal Communications Commission that its E-Rate review should stay focused on connectivity, not classroom screen-time policy. A coalition of 105 bipartisan state legislators sent the FCC a letter warning the Commission's proposal overreaches beyond its historic focus on connectivity. Reply comments are due Thursday, November 12.

In New York City, about two dozen students, teachers and advocates protested ahead of the Panel for Educational Policy's monthly meeting, demanding the city's AI pilot for high schoolers be canceled and the current 2K-through-eighth-grade AI moratorium extended to high schools.

Long Beach Unified School District has opened surveys on how technology affects student learning, concentration, privacy and well-being, open through Friday, November 6, following student protests over AI's effect on independent thinking.

Stories & links:

1. "Stolen Logins Spread Attacks Between K‑12 Districts" — https://www.helpnetsecurity.com/2026/10/29/cis-k-12-cybersecurity/

2. "Big Districts Tell FCC: Keep E-Rate Out of Screen-Time Fight" — https://marketbrief.edweek.org/regulation-policy/fcc-public-comments-show-broad-support-for-e-rate-divide-over-regulating-screen-time/2026/10

3. "105 State Lawmakers Urge FCC to Preserve E-Rate" — https://www.benton.org/blog/state-legislators-ask-fcc-preserve-and-strengthen-e-rate

4. "NYC Advocates Demand AI Pilot Moratorium Extend to High Schools" — https://ny1.com/nyc/all-boroughs/news/2026/10/29/advocates-call-for-ai-moratorium-to-extend-to-new-york-high-schools

5. "Long Beach Unified Surveys Families on AI and Screen Time" — https://patch.com/california/longbeach-ca/long-beach-schools-ask-families-weigh-ai-classrooms

Brought to you by the Edsby student success platform for K-12.

Court Keeps Bain Capital in PowerSchool Breach Suit Alive Oct 28, 2026

Show notes

A U.S. federal court has denied motions to dismiss major claims against PowerSchool and its owner, private equity firm Bain Capital, in the multi-district class action over the December 2024 data breach that exposed records of an estimated 50 million students and teachers. The court found Bain Capital exerts operational control over PowerSchool's cybersecurity decisions and allowed claims under strict medical confidentiality laws to proceed.

Federal investigators now believe a known ransomware gang was behind the cyberattack that shut down Springfield Public Schools' network in Massachusetts, according to a Sept. 30 report the district submitted to the state. The breach knocked out email, phone and vital records for the district's 24,000 students, and stolen data later appeared on the dark web.

New York Governor Kathy Hochul has signed what her office calls the nation's strongest AI safety law for kids, restricting commercial AI chatbots that mimic humans, build emotional dependency, or encourage self-harm, along with rules for internet-connected baby monitors. The chatbot law takes effect January 1, 2027.

A new report surveying 426 technology leaders finds that 66% of districts whose daily operations were disrupted by cyberattacks employ only one or two dedicated cybersecurity staff members, underscoring the staffing gap behind incidents like Springfield and PowerSchool.

Stories & links:

"Court Keeps Bain Capital in PowerSchool Breach Suit" — https://databreaches.net/2026/10/28/court-denies-motions-to-dismiss-in-powerschool-data-breach-litigation/

"Feds Tie Springfield Schools Attack to Interlock Gang" — https://www.govtech.com/education/k-12/federal-report-pins-springfield-schools-cyber-attack-on-hacker-group

"Hochul Signs Nation-Leading AI Chatbot Safety Law for Kids" — https://fortune.com/2026/10/28/new-york-state-kathy-hochul-bans-ai-chatbots-romantic-baby-monitors/

"New Report: K‑12 Cybersecurity Staffing Falls Short" — https://scworld.com/brief/new-report-highlights-cybersecurity-challenges-in-k-12-schools

Brought to you by the Edsby student success platform for K-12.

Oneonta Data Theft Claimed as Frontline Mails Breach Notices Oct 27, 2026

Show notes

A hacker group calling itself Shiba claimed credit today for the ransomware attack on New York's Oneonta City School District, sending breach claims to media outlets the same day students returned to class after a two-day closure. Superintendent Thomas Brindley has not confirmed what data was affected, and the full scope remains unknown.

Frontline Education, whose administration software handles payroll and HR for schools nationwide, has begun mailing formal breach notification letters tied to its August cyberattack. Exposed data can include Social Security numbers, driver's license numbers, passports, Medicaid IDs and student IDs; Killeen Independent School District in Texas now reports roughly 45,000 potentially affected individuals, adding to previously disclosed impacts at Methuen Public Schools and Greenwood School District.

In Ohio, the Hamilton City Schools board advanced new policy language restricting AI-enabled wearable cameras and transcription devices on school property, while reaffirming vendor limits on accessing location, audio, video and student activity data and requiring contracts to specify data destruction after termination.

Stories & links:

1. "Shiba Ransomware Claims Oneonta Student Data Theft" — link

2. "Frontline Education Begins Breach Notification Mailings" — link

3. "Frontline Breach Fallout Spreads Across States" — link

4. "Hamilton City Schools Advances AI Recording-Device Policy" — link

Brought to you by the Edsby student success platform for K-12.

Richmond's Chromebook Workaround as Qilin Claims Burnaby Breach Oct 26, 2026

Show notes

Richmond Public Schools has routed around its ransomware-disabled network, deploying Chromebooks to every teacher so they can reach district platforms via a secure alternative network, five days after an attack knocked out internet, phone and email at all 53 schools. Wednesday becomes a student-free workday, and free credit monitoring is being offered to staff, students and families.

The Qilin ransomware group has claimed credit for last month's data theft at Burnaby School District in British Columbia, according to Ransomware.live, which also says Qilin claimed the Richmond Public Schools outage. Burnaby had said stolen files may include students' and parents' contact details, birthdates and bus routing information.

New reporting shows artificial intelligence looming large in Maryland's school board elections, where more than 135 candidates are running for 24 boards that must implement the state's Artificial Intelligence Ready Schools Act, with a Local News Network survey finding many candidates hesitant about the technology.

Stories & links:

1. "Richmond Schools Build Chromebook Workaround After Ransomware Attack" — https://www.wric.com/news/local-news/richmond/rps-chromebooks-secure-network/

2. "Qilin Claims Credit for Burnaby School District Breach" — https://www.ransomware.live/id/QnVybmFieSBTY2hvb2xzIC0gU2Nob29sIERpc3RyaWN0IDQxQHFpbGlu

3. "Maryland School Board Candidates Weigh In On AI" — https://marylandmatters.org/2026/10/26/school-board-candidates-view-ai-with-trepidation

4. "Brazil Election Shock Sinks Education Stocks" — https://www.cnbc.com/2026/10/26/brazil-stocks-neoclouds-selloff.html

Brought to you by the Edsby student success platform for K-12.

Oneonta Schools Closed by Ransomware, UK Pushes AI Rules Oct 23, 2026

Show notes

Oneonta City School District in New York closed schools today and will stay closed Monday after what was first reported as a tech glitch was confirmed as a ransomware attack; Superintendent Thomas Brindley says the scope of compromised data is still unknown as a third-party security firm investigates, with the district's 1,700 students expected back Tuesday.

In the UK, education campaigners are pressing the Department for Education to stand up a rapid-response AI unit by November 1st and mandate that every school have an approved AI strategy by September 2027; the DfE's response cited existing curriculum and tutoring initiatives but stopped short of committing to a taskforce or mandate.

Highland Council members in Scotland are pushing to review and scale back 1-to-1 student laptops, citing harm to handwriting and teaching, echoing warnings from over 150 UK medical professionals and Sweden's recent return to physical textbooks.

FCC Commissioner Anna Gomez, the agency's lone Democrat, called plans to sunset E-Rate 'misguided' after visiting Bedford School District to see the program's role in classroom and safety infrastructure; reply comments in the FCC's review remain open until November 12th.

Stories & links:

"Ransomware Closes Oneonta City Schools" — https://www.wbng.com/2026/10/23/oneonta-city-school-district-closes-following-cybersecurity-attack/

"UK Campaigners Press DfE on AI Rapid-Response Unit" — https://www.nuze.com/article/ai-is-already-in-britains-classrooms-the-rules-the-evidence-16a4dc

"Councillors warn against devices replacing teaching" — https://www.bbc.com/news/articles/cm3694ywkg0wo

"FCC's Gomez Calls E-Rate Sunset 'Misguided'" — https://www.law360.com/publicpolicy/articles/2541729

Brought to you by the Edsby student success platform for K-12.

Richmond Schools Can't Confirm Data Theft After Ransomware Hit Oct 22, 2026

Show notes

Richmond Public Schools shut down its network after a ransomware attack left ransom notes on staff laptops; the district still cannot confirm whether attackers actually stole data on its 22,000 students or merely encrypted files, despite threats to leak it.

A federal judge in Florida let a data-breach lawsuit against test-prep giant Kaplan proceed to trial, ruling that taking a district's money creates a legal duty to protect its data; about 1.4 million people were allegedly affected.

Wisconsin's Adams-Friendship Area School District may have lost about $92,000 after its business manager processed a fraudulent third-party payment request, as the state reports a 200% jump in cybersecurity incidents.

Stories & links:

1. "Ransom Notes Shut Down Richmond Schools' Network" — https://cybernews.com/news/richmond-schools-ransomware-attack-ransom-note/

2. "Judge Lets Trimmed Kaplan Breach Suit Proceed" — https://natlawreview.com/article/when-education-customers-data-exposed-which-claims-stick

3. "Wisconsin District Loses $92K to Cyber Fraud" — https://hoodline.com/2026/10/rural-wisconsin-school-district-loses-92-000-in-cyberattack-manager-put-on-leave/

Brought to you by the Edsby student success platform for K-12.

Senators Demand Google Answer for School AI Push by Nov. 2 Oct 21, 2026

Show notes

Senators Richard Blumenthal and Josh Hawley sent Google parent Alphabet ($GOOGL) a letter demanding answers about its "aggressive push" of AI tools like Gemini into K‑12 classrooms, including why AI features default to on for student devices, and set a November 2nd deadline to respond.

Klein Independent School District in Texas confirmed it is the latest district caught in the Frontline Education vendor breach, which may have exposed Social Security numbers and other data for 38,000 people after attackers exploited a third-party vulnerability.

Clover School District in South Carolina began blocking student access to AI tools today, allowing only the SchoolAI platform while it builds out responsible-use expectations.

E-Rate's annual administrative window opened today, giving coordinators until early 2027 to update student counts and library square footage before applicant profiles lock for the funding cycle.

Also: a correction on last week's Arbor MIS story — Arbor says there's no evidence any platform vulnerability caused the UK data export.

Stories & links:

"Senators Press Google Over AI in Classrooms" — link

"Frontline Breach Reaches Klein ISD, Texas" — link

"Clover Schools Block AI Tools, Keep SchoolAI" — link

"E-Rate's Administrative Window Opens" — link

Brought to you by the Edsby student success platform for K-12.

Education Ransomware Up 54%, Oklahoma District Hit Oct 20, 2026

Show notes

A new Comparitech report finds worldwide education-sector ransomware attacks rose 54% in Q3 compared to Q2 — far outpacing the 29% rise across all industries — with 77 attacks tracked, 25 confirmed, and a median ransom demand of $510,000.

In Oklahoma, Seminole Public Schools has been named a new victim by a group calling itself Global Secret Group, with nearly 40 gigabytes of stolen files claimed on a leak site; the district has not yet confirmed a breach.

At the DLAC Ignite conference in Atlanta, curriculum provider StrongMind unveiled StrongMind CoursePro, an AI-powered, Amazon-built course-creation platform the company says produces K‑11 — K‑12 courseware nearly twice as fast, earning it recognition as a 2026 AWS EdTech Champion.

The Net Gain Edtech Index closed down about a quarter of one percent today, with shares of enterprise training company SkillSoft ($SAIL) up almost 10% after a 16% drop the day before, though no specific news accompanied the move.

Stories & links:

1. "Ransomware Attacks on Schools Jump 54%" — https://www.comparitech.com/news/education-ransomware-roundup-q3-2026-stats-on-attacks-ransoms-and-data-breaches/

2. "Global Secret Group Claims Seminole Schools" — https://classlawdc.com/2026/10/20/seminole-schools-data-breach/

3. "StrongMind Unveils CoursePro" — https://prnewswire.com/news-releases/strongmind-unveils-strongmind-coursepro-an-ai-powered-course-creation-platform-at-dlac-ignite-302914326.html

Brought to you by the Edsby student success platform for K-12.

ETS Breach Traced to One Login as Wisconsin Joins AI Fight Oct 19, 2026

Show notes

New reporting shows a single stolen login let intruders access an ETS SFTP server and copy California student records dating back to 2006, exposing names, birth dates, addresses, and disability status (though not Social Security numbers). ETS discovered the breach roughly four months after the intrusion and began notifying families last Friday.

Wisconsin's attorney general joined 38 other states in court filings opposing the sale of Character.AI's assets in its bankruptcy, arguing privacy and child-safety safeguards must be built into any buyer's terms. Disney ($DIS) has reportedly offered $20 million for certain Character.AI IP as the sale process continues.

A weekend cyberattack forced Idaho's Jerome School District to cancel classes for its 4,000 students today while investigators from state and federal agencies assess the damage.

In Texas, the Qilin ransomware group claimed on a dark web leak site that it had compromised Llano Independent School District, though the scope of any breach remains unconfirmed.

Stories & links:

1. "One Login Exposed Years of California Student Records" — https://www.securityweek.com/one-compromised-login-exposed-millions-of-california-students-records/

2. "Wisconsin Joins 39-State Action in Character.AI Bankruptcy" — https://wislawjournal.com/2026/10/19/wisconsin-joins-states-seeking-ai-chatbot-safeguards

3. "Cyberattack Cancels Monday Classes in Jerome, Idaho" — https://www.technadu.com/jerome-school-district-cyberattack-cancels-monday-classes-in-idaho/642806/

4. "Qilin Claims Llano ISD on Leak Site" — https://classlawdc.com/2026/10/19/llano-independent-school-district-data-breach/

Brought to you by the Edsby student success platform for K-12.