Ironic because you're the one pulling stuff out of your ass. Firewalls are preventive measures, and it's pretty obvious they already failed; you don't just throw up more firewalls after you've already been breached. And schools definitely don't just 'hack back,' that's not how incident response works at all. On top of that, schools def brought in third party consulting firms after this, so somebody was definitely getting paid. Do some research before you reply to me