2020 Miami-Dade Public Schools DDoS attack
| Date | September 3, 2020 |
|---|---|
| Time | 2:53 am EDT (06:53 UTC) |
| Location | Miami-Dade County, Florida, United States |
| Type | Cyberattack |
| Cause |
|
| Outcome |
|
| Arrests | 1 |
On September 3, 2020, at 2:53 am EDT, a 16-year-old male from South Miami, Florida was arrested in connection with distributed denial-of-service (DDoS) attacks on the Miami-Dade County Public Schools's computer network, the fourth largest in the US,[2] causing the system to crash during the first three days of the school year. It occurred as the school system was attempting to conduct internet-based instruction during the COVID-19 pandemic of 2020. After monitoring the IP addresses using the network, investigators concluded the teenager and several foreign actors had hacked the system.[3] At the time, the school district had contracted Stride, Inc. (at the time known as K12 Inc.) to provide the software necessary for the internet-based instruction. Despite its price tag of $15.3 million, Stride was surprisingly susceptible to the attacks. Consequently, the school district sought the help of the FBI and U.S. Secret Service to investigate.[4]
Method used in the attacks
[edit]According to an affidavit, the suspect used Low Orbit Ion Cannon (LOIC) to launch the attacks. LOIC is an application that uses DDoS-style attacks to disrupt websites. However, investigators say the teen was not the only hacker involved. Numerous other IP addresses were associated with the attacks originating from Russia, Ukraine, China, Iraq, and other countries. Investigators said the suspect was responsible for eight of at least 24 attacks.[3]
After the accused admitted to his involvement, he was charged with the crime of using a computer to defraud, a third-degree felony.[2]
Agencies involved in the investigation
[edit]The FBI, the US Secret Service, and the Florida Department of Law Enforcement[5] were the investigating agencies. Former US Congresswoman Debbie Mucarsel-Powell of Florida's 26th congressional district formally asked the FBI for a briefing on the issue.[6][7] US Senator Marco Rubio from Florida asked the Department of Homeland Security for information about the attacks as well.[8]
See also
[edit]- List of cyberattacks on U.S. schools 2020
- List of data breaches
- Hit-and-run DDoS
- Hacks at the Massachusetts Institute of Technology
- Ransomware
References
[edit]- ^ Taghavi Zargar, Saman (November 2013). "A Survey of Defense Mechanisms Against Distributed Denial of Service (DDoS) Flooding Attacks" (PDF). IEEE COMMUNICATIONS SURVEYS & TUTORIALS. pp. 2046–2069. Retrieved March 7, 2014.
- ^ a b Wade, Reggie (September 3, 2020). "16-year-old student arrested for allegedly crippling Miami school system with cyberattack". Yahoo News. Retrieved September 6, 2020.
- ^ a b Wright, Colleen; Ovalle, David (September 3, 2020). "Student arrested for cyberattack against Miami schools used 'easy to prevent' program". Miami Herald. Retrieved September 6, 2020.
- ^ Vela, Hatzel (September 2, 2020). "Questions swirl around $15. 3 million contract for the K-12 platform". Local 10. Retrieved September 6, 2020.
- ^ Allen, Karma (September 2, 2020). "16-year-old arrested for hacking Miami Dade school system". ABC News. Retrieved September 6, 2020.
- ^ Odzer, Ari; Hamacher, Brian; Pipitone, Tony (September 3, 2020). "Student Arrested in Connection With Cyber Attacks on Miami-Dade Public Schools". NBC Miami. Retrieved September 6, 2020.
- ^ Vela, Hatzel; Milberg, Glenna; Morejon, Liane (September 4, 2020). "Student arrested in Miami-Dade Schools cyberattacks 'a good kid, ' neighbors say". WPLG Inc. Retrieved September 6, 2020.
- ^ Rubio, Marco (September 2, 2020). "Rubio Requests Briefing from DHS after Miami-Dade County Public Schools Cyberattack". rubio.senate.gov. Retrieved September 9, 2020.