Above: I’m behind in posting about NSBORO’s alert to parents about a data breach of student info through a school vendor.
Last week, parents of students in Northborough-Southborough Public Schools received an email notifying them that an information system vendor’s data was breached.
PowerSchool, which NSBORO Schools use to track students’ classes, report cards, and attendance, notified the district on January 7th of a data breach that impacted their customers nationwide.
In the district’s email on January 8th, Superintendent Gregory Martineau wrote:
Unfortunately, this resulted in NSboro’s student and staff personally identifiable information being accessed by an unauthorized third party. . .
PowerSchool told its clients: “The incident is contained, and we do not anticipate the data being shared or made public.” We will continue working with PowerSchool to understand what data was exported and how they will provide support to those affected.
The following day*, Martineau updated parents that the IT Department had created a webpage with answers to FAQs on the incident.
Based on the posted answers to the Frequently Asked Questions, Social Security Numbers for current students and staff weren’t accessed, and only one former student’s SSN may have been compromised. (The school was following up directly with that person.)
However, the data did include the full names, birth dates, and parent’s names for most of the students. In addition, while medical records weren’t accessed, “some medical alerts and physician information related to students were disclosed”.
You can find more details on the website here.
