As families prepare for a new school year, backpacks and school supplies aren’t the only things that need to be ready. Students are also heading back to classrooms with laptops, tablets, online accounts, gaming devices, and social media platforms, creating new opportunities for cybercriminals to target children and families.
To help families better understand the risks and how to stay protected, we spoke with Jay Martin, Vice President & Donegal’s Information Security Officer, and Corey Lehman, Information Security Analyst. Known as the “security dudes” at Donegal, they shared their insight on common back-to-school cybersecurity risks, warning signs to watch for, and simple steps families can take to build safer online habits.
Understanding the Biggest Online Risks
According to Corey Lehman, one of the biggest online risks facing children and families is social engineering.
“Humans are the weakest link when it comes to security because we react based on emotions and can be tricked by someone attempting to exploit our emotions,” Corey explained.
Social engineering occurs when cybercriminals manipulate someone into providing information, clicking a link, downloading something, or taking another action that could compromise their security. For children, this can be especially concerning because they may not recognize when someone is attempting to manipulate them.
Fear, urgency, curiosity, and the promise of a reward can all be used to influence someone’s decisions online. Teaching children to recognize these tactics is an important first step in protecting themselves and their families.
Jay Martin also recommends paying close attention when setting up new accounts or downloading software for the school year. “Make sure you only use approved, safe links to ensure you’re downloading or accessing the correct application,” he said.
Families should avoid clicking on links from unfamiliar emails or messages, and instead navigate directly to the school’s official website or another trusted source when accessing new applications or accounts.
Keeping School Devices Secure
Many students rely on school-issued laptops and tablets throughout the school year, making device security another important part of back-to-school preparation.
Corey Lehman recommends keeping the device’s operating system and all installed applications up to date and ensuring that the device is password protected.
“While the school should have basic safeguards and security measures installed, the user is ultimately responsible for the security of the device,” he said.
Jay Martin
Vice President
Information Security Officer
Corey Lehman
Information Security Analyst
Software updates often include important security fixes, so putting them off can leave devices vulnerable to known threats. Families should also make sure passwords or other available security measures are enabled.
Jay Martin recommends keeping school-issued equipment focused on its intended purpose.
“Use school-issued equipment only for school-related software and work.”
Limiting what is downloaded or accessed on a school device can help reduce unnecessary security risks and keep personal information separate from school activities.
Think Twice Before Using Public Wi-Fi
Students may connect to public Wi-Fi at school, libraries, coffee shops, or other locations throughout the year. While public networks can be convenient, families should understand that they may not provide the same level of security as a trusted home or private network.
“Public Wi-Fi is useful for providing internet access when a cellular plan or home/private network is unavailable, but it should be treated as such,” Corey explained.
Sensitive information transmitted over a public network could potentially be exposed to other connected devices or users.
Corey compares using public Wi-Fi for sensitive information to writing on a whiteboard where others can see it, rather than writing the information in a personal notebook.
When using public Wi-Fi, families should avoid accessing or transmitting sensitive information whenever possible and should be especially cautious when logging into financial accounts or entering personal information.
Recognizing Phishing and Online Scams
Children and families can encounter phishing attempts in emails, text messages, social media, online games, and other digital spaces.
“Children are highly susceptible to phishing and social engineering,” Corey said.
Cybercriminals often rely on emotions to convince someone to take an action. A message may create fear by claiming an account will be closed, or it may promise a reward for clicking a link or providing information.
For example, a child may receive a message promising free in-game credits if they click a link to redeem an offer. Without checking the legitimacy of the website first, the child could expose personal information or compromise their gaming account.
The same tactics can target parents and other family members. Gift cards, rewards points, flight miles, surveys, and other incentives can all be used to encourage someone to click a malicious link or provide information.
Families should watch for common warning signs, including unexpected messages, unfamiliar links, requests for personal information, urgent language, and offers that seem too good to be true. When in doubt, don’t click.
Navigating Social Platforms and Online Interactions
Cyberbullying and unsafe interactions can create another layer of risk for children who spend time online. Social media platforms, messaging apps, and even online games can expose children to people and content they may not be prepared to navigate.
Corey Lehman recommends that parents carefully consider their children’s access to social media and the types of online interactions they are exposed to. “Children, regardless of age, tend to follow trends of behavior that their classmates, idol figures, or even their own parents might promote online,” he said.
Social interactions aren’t limited to traditional social media platforms.
“Definitely limit your children’s access to ensure they are using age-appropriate social media, and track how they’re using it.” Jay Martin points out. “Be aware that many online games now have a social media element as well.”
Parents should know what platforms, games, and websites their children are using and create an environment where children feel comfortable talking about uncomfortable or inappropriate interactions they encounter online.
Know the Signs of a Compromised Account
Even with strong security practices in place, families should know what to look for if an account or device has been compromised.
One potential warning sign is receiving a suspicious login notification.
“This typically indicates that someone somewhere at least knows the username or email of the account and has attempted a login using that information,” Corey Lehman said.
If a compromise is suspected, families should immediately change the affected account’s password and enable multi-factor authentication (MFA), if available.
MFA adds another layer of security by requiring an additional approval or security code after a username and password are entered. This can help prevent unauthorized access in the event that a cybercriminal obtains the correct password. Corey also recommends using unique passwords for different accounts and avoiding password reuse.
“If hackers find your password on one site, they will immediately try that password on every other site they can find,” Jay Martin added.
Start the Conversation Before School Starts
Cybersecurity isn’t just about technology. Creating safer online habits starts with conversations at home. Parents should be aware of the websites and platforms their children are using and establish clear expectations about what is appropriate to access and what information is safe to share online.
“Parents should always be aware of the sites their children are accessing and assess whether they’re appropriate or not,” Corey said.
Jay acknowledges that monitoring a child’s online activity can sometimes feel uncomfortable, but open communication can make it easier for families to navigate those challenges together.
“It’s hard to be a responsible parent in the Internet age without feeling like you’re spying on your children, but you should definitely know what your children are doing on the Internet and what sites they are using,” he said.
Creating an environment where children can ask questions and discuss appropriate and inappropriate online behavior can help them develop better judgment as they become more independent online.
Build Strong Cybersecurity Habits
When it comes to protecting your family online, there isn’t one single step that will eliminate every risk. Instead, cybersecurity comes down to several habits working together.
Corey Lehman compares it to the old saying about being chased by a bear: you don’t have to be the fastest runner; you just can’t be the slowest. “Cybercriminals are always seeking out the ‘low hanging fruit,’ or the ‘slowest’ victims, because it requires minimal effort on their part,” he explained.
Keeping devices and applications up-to-date, enabling MFA, using unique and strong passwords, and being careful about what information is shared online can make accounts and devices more difficult to compromise.
Jay agrees that strong passwords and MFA are two habits every family should adopt.
“Use unique strong passwords and use multi-factor authentication whenever it’s offered, especially on financial, email, and other critical sites,” he said.
As students head back to school, taking a few minutes to review these habits can go a long way toward creating a safer digital environment for the entire family. From school-issued devices and public Wi-Fi to gaming accounts and social media, online safety is an important part of being prepared for the new school year. By staying informed, having open conversations, and practicing good cybersecurity habits, families can help keep their information, accounts, and devices protected.
ABOUT Donegal®
Donegal Insurance Group provides property and casualty insurance products through a network of independent agents in 21 states across several regions of the U.S. The group includes Donegal Mutual Insurance Company and the insurance subsidiaries of Donegal Group Inc. (NASDAQ: DGICA and DGICB). In several Southwestern states, business is conducted as the Mountain States Insurance Group; and in Michigan, business is conducted as Michigan Insurance. Headquartered in Marietta, Pa., the group has been in the insurance business for more than 130 years.
Learn more about how Donegal is There when it matters most.™ Visit https://www.donegalgroup.com.
Contact:
Karlie Fromm
Corporate Communications Specialist
Donegal Insurance Group
Phone: (800) 877-0600, x7070
karliefromm@donegalgroup.com