Undercover Evaluation Finds Security Breaches at Chicago Area Schools

Undercover Evaluation Finds Security Breaches at Chicago Area Schools

A security firm’s recent evaluation of Park Ridge –Niles School District 64 schools revealed visitors were allowed to enter buildings without permission, walk around unattended and even take photographs.

In a Jan. 23 report to the board of education, Paul Timm of RETA Security, a Lamont-based school security consulting firm hired by District 64, outlined the security breaches that occurred when undercover RETA employees visited the schools and attempted to gain access.

Timm said that the breaches occurred at the sic schools that do not have locked entry vestibules.

Timm reference incidents where undercover security team members where buzzed into schools, but did not report to the main office, giving them full access to the school building. He described how two of the team members gained access to the building by following behind a visitor who was being buzzed into a school through the main entrance, allowing them to enter the building without stating their purpose for being there. All the members who gained entry this way wondered through the schools without any question why they were there.

"No one addressed those two individuals, a male and a female, the entire time they were in the building, which was probably 10 minutes, taking photos of boiler rooms, auditoriums, cafeterias," Timm said. "In four instances, the female RETA security person did hit the intercom button from the outside and was asked to state a purpose for being there. She stated she was there to visit a former teacher and was granted permission to come into the building. She did not report to the office in any of those cases."

Timm reported that one team member was allowed to enter the school through an exterior side door. He said the door was opened by a teacher’s aide with “no questions asked.”

Timm suggested the lack of locked vestibules gave schools a higher chance of a breach as they were not able to cherry-pick who comes and goes. In some cases, a schools’ main office may be down the hall from the main entrance. In a best case scenario, a person would have to come into the vestibule and enter into the main office right away to check-in or state their purpose for being there.

Featured

  • Survey: 54% of Organizations Cite Technical Debt as Top Hurdle to Identity System Modernization

    Modernizing identity systems is proving difficult for organizations due to two key challenges: decades of accumulated Identity and Access Management (IAM) technical debt and the complexity of managing access across multiple identity providers (IDPs). These findings come from the new Strata Identity-commissioned report, State of Multi-Cloud Identity: Insights and Trends for 2025. The report, based on survey data from the Cloud Security Alliance (CSA), highlights trends and challenges in securing cloud environments. The CSA is the world’s leading organization dedicated to defining standards, certifications, and best practices to help ensure a secure cloud computing environment. Read Now

  • Study: Only 35 Percent of Companies Include Cybersecurity Teams When Implementing AI

    Only 35 percent of cybersecurity professionals or teams are involved in the development of policy governing the use of AI technology in their enterprise, and nearly half (45 percent) report no involvement in the development, onboarding, or implementation of AI solutions, according to the recently released 2024 State of Cybersecurity survey report from ISACA, a global professional association advancing trust in technology. Read Now

  • New Report Series Highlights E-Commerce Threats, Fraud Against Retailers

    Trustwave, a cybersecurity and managed security services provider, recently released a series of reports detailing the threats facing the retail sector, marking the second year of its ongoing research into these critical security issues. Read Now

  • Stay Secure in 2024: Updated Cybersecurity Tips for the Office and at Home

    Cyber criminals get more inventive every year. Cybersecurity threats continue to evolve and are a moving target for business owners in 2024. Companies large and small need to employ cybersecurity best practices throughout their organization. That includes security integrators, manufacturers, and end users. Read Now

Featured Cybersecurity

Webinars

New Products

  • ResponderLink

    ResponderLink

    Shooter Detection Systems (SDS), an Alarm.com company and a global leader in gunshot detection solutions, has introduced ResponderLink, a groundbreaking new 911 notification service for gunshot events. ResponderLink completes the circle from detection to 911 notification to first responder awareness, giving law enforcement enhanced situational intelligence they urgently need to save lives. Integrating SDS’s proven gunshot detection system with Noonlight’s SendPolice platform, ResponderLink is the first solution to automatically deliver real-time gunshot detection data to 911 call centers and first responders. When shots are detected, the 911 dispatching center, also known as the Public Safety Answering Point or PSAP, is contacted based on the gunfire location, enabling faster initiation of life-saving emergency protocols. 3

  • AC Nio

    AC Nio

    Aiphone, a leading international manufacturer of intercom, access control, and emergency communication products, has introduced the AC Nio, its access control management software, an important addition to its new line of access control solutions. 3

  • QCS7230 System-on-Chip (SoC)

    QCS7230 System-on-Chip (SoC)

    The latest Qualcomm® Vision Intelligence Platform offers next-generation smart camera IoT solutions to improve safety and security across enterprises, cities and spaces. The Vision Intelligence Platform was expanded in March 2022 with the introduction of the QCS7230 System-on-Chip (SoC), which delivers superior artificial intelligence (AI) inferencing at the edge. 3