Undercover Evaluation Finds Security Breaches at Chicago Area Schools

Undercover Evaluation Finds Security Breaches at Chicago Area Schools

  • Feb 15, 2017

A security firm’s recent evaluation of Park Ridge –Niles School District 64 schools revealed visitors were allowed to enter buildings without permission, walk around unattended and even take photographs.

In a Jan. 23 report to the board of education, Paul Timm of RETA Security, a Lamont-based school security consulting firm hired by District 64, outlined the security breaches that occurred when undercover RETA employees visited the schools and attempted to gain access.

Timm said that the breaches occurred at the sic schools that do not have locked entry vestibules.

Timm reference incidents where undercover security team members where buzzed into schools, but did not report to the main office, giving them full access to the school building. He described how two of the team members gained access to the building by following behind a visitor who was being buzzed into a school through the main entrance, allowing them to enter the building without stating their purpose for being there. All the members who gained entry this way wondered through the schools without any question why they were there.

"No one addressed those two individuals, a male and a female, the entire time they were in the building, which was probably 10 minutes, taking photos of boiler rooms, auditoriums, cafeterias," Timm said. "In four instances, the female RETA security person did hit the intercom button from the outside and was asked to state a purpose for being there. She stated she was there to visit a former teacher and was granted permission to come into the building. She did not report to the office in any of those cases."

Timm reported that one team member was allowed to enter the school through an exterior side door. He said the door was opened by a teacher’s aide with “no questions asked.”

Timm suggested the lack of locked vestibules gave schools a higher chance of a breach as they were not able to cherry-pick who comes and goes. In some cases, a schools’ main office may be down the hall from the main entrance. In a best case scenario, a person would have to come into the vestibule and enter into the main office right away to check-in or state their purpose for being there.

Featured

  • Analysis of AI Tools Shows 85 Percent Have Been Breached

    AI tools are becoming essential to modern work, but their fast, unmonitored adoption is creating a new kind of security risk. Recent surveys reveal a clear trend – employees are rapidly adopting consumer-facing AI tools without employer approval, IT oversight, or any clear security policies. According to Cybernews Business Digital Index, nearly 90% of analyzed AI tools have been exposed to data breaches, putting businesses at severe risk. Read Now

  • Software Vulnerabilities Surged 61 Percent in 2024, According to New Report

    Action1, a provider of autonomous endpoint management (AEM) solutions, today released its 2025 Software Vulnerability Ratings Report, revealing a 61% year-over-year surge in discovered software vulnerabilities and a 96% spike in exploited vulnerabilities throughout 2024, amid an increasingly aggressive threat landscape. Read Now

  • Evolving Cybersecurity Strategies: Uniting Human Risk Management and Security Awareness Training

    Organizations are increasingly turning their attention to human-focused security approaches, as two out of three (68%) cybersecurity incidents involve people. Threat actors are shifting from targeting networks and systems to hacking humans via social engineering methods, living off human errors as their most prevalent attack vector. Whether manipulated or not, human cyber behavior is leveraged to gain backdoor access into systems. This mainly results from a lack of employee training and awareness about evolving attack techniques employed by malign actors. Read Now

  • Report: 1 in 3 Easily Exploitable Vulnerabilities Found on Cloud Assets

    CyCognito recently released new research highlighting critical security vulnerabilities across cloud-hosted assets, revealing that one in three easily exploitable vulnerabilities or misconfigurations are found on cloud assets. As organizations increasingly shift to multi-cloud strategies, the findings underscore significant security gaps that could provide attackers with potential footholds into networks. Read Now

  • Built for Today, Ready for Tomorrow

    Selecting the right VMS is critical for any organization that depends on video surveillance to ensure safety, security and operational efficiency. While many organizations focus on immediate needs such as budget and deployment size, let us review some of the long-term considerations that can significantly impact a VMS's utility and flexibility. Read Now

Most   Popular

New Products

  • HD2055 Modular Barricade

    Delta Scientific’s electric HD2055 modular shallow foundation barricade is tested to ASTM M50/P1 with negative penetration from the vehicle upon impact. With a shallow foundation of only 24 inches, the HD2055 can be installed without worrying about buried power lines and other below grade obstructions. The modular make-up of the barrier also allows you to cover wider roadways by adding additional modules to the system. The HD2055 boasts an Emergency Fast Operation of 1.5 seconds giving the guard ample time to deploy under a high threat situation.

  • Connect ONE’s powerful cloud-hosted management platform provides the means to tailor lockdowns and emergency mass notifications throughout a facility – while simultaneously alerting occupants to hazards or next steps, like evacuation.

    Connect ONE®

    Connect ONE’s powerful cloud-hosted management platform provides the means to tailor lockdowns and emergency mass notifications throughout a facility – while simultaneously alerting occupants to hazards or next steps, like evacuation.

  • A8V MIND

    A8V MIND

    Hexagon’s Geosystems presents a portable version of its Accur8vision detection system. A rugged all-in-one solution, the A8V MIND (Mobile Intrusion Detection) is designed to provide flexible protection of critical outdoor infrastructure and objects. Hexagon’s Accur8vision is a volumetric detection system that employs LiDAR technology to safeguard entire areas. Whenever it detects movement in a specified zone, it automatically differentiates a threat from a nonthreat, and immediately notifies security staff if necessary. Person detection is carried out within a radius of 80 meters from this device. Connected remotely via a portable computer device, it enables remote surveillance and does not depend on security staff patrolling the area.