"Privacy watchdogs in Ontario and Alberta issued their findings Tuesday after investigating a mass data breach of a student information system used across Canada, concluding that school boards lacked adequate breach response plans, among other issues. Ontario's privacy commissioner says PowerSchool, a software and storage company for school systems in the U.S. and Canada, was a victim of a cyberattack and ransom threat in December 2024 that compromised the data of current and former students, parents and staff."
"Ontario's watchdog says about 5.2 million Canadians were affected by the cyberattack, and while PowerSchool paid a ransom, the threat actor also demanded ransom payments from school boards, including those in Toronto and Peel Region. Though Ontario and Alberta launched separate investigations, both had common findings, including that some or all school boards lacked adequate breach response plans or protocols, failed to include certain privacy and security provisions in their contracts with PowerSchool and lacked policies to oversee PowerSchool's safeguards."
PowerSchool, a software and storage company for school systems, suffered a cyberattack and ransom threat in December 2024 that compromised students', parents' and staff data. About 5.2 million Canadians were affected, and PowerSchool paid a ransom while the threat actor also demanded payments from some school boards, including Toronto and Peel. Ontario and Alberta privacy commissioners found that some or all boards lacked adequate breach response plans, omitted key privacy and security provisions in contracts with PowerSchool, and lacked policies to oversee its safeguards. Commissioners recommended reviewing agreements with PowerSchool, implementing monitoring systems and ensuring adequate breach policies. The incident followed the sentencing of a 19-year-old convicted of cyber extortion involving PowerSchool.
Read at www.cbc.ca
Unable to calculate read time
Collection
[
|
...
]