A cybersecurity breach at Baltimore City Public Schools compromised information on former staff, over half of current school employees and over 1,000 students.
The attack happened Feb. 13 and affected “certain IT systems within our network,” according to a news release the school district sent on Tuesday. The school system immediately notified police, who investigated.
City schools learned that “certain documents may have been compromised by criminal actors.”
The documents “contained information belonging to some current and former employees, volunteers, and contractors, as well as files related to less than 1.5% of our student population,” according to the school system, which teaches over 75,000 students.
The Baltimore Banner thanks its sponsors. Become one.
The breach affected approximately 55% of the school system’s current employees, which include full-time staff, substitutes and temporary staff, the district stated. Sonja Santelises, the school system’s CEO, was one of them.
“I am feeling what I’m sure many of our staff will be feeling, and it is a feeling of exposure,” she said.
However, she’s grateful that it wasn’t worse.
She said she cannot speak to what kind of data was compromised but said Baltimore City Schools have been the targets of “numerous” attack attempts.
“This is the first one that has gotten through to this extent,” the CEO added.
The Baltimore Banner thanks its sponsors. Become one.
Making sure staff are taken care of has been the system’s first priority, she said. Second is making sure the system itself is secure.
Notification letters were mailed to anyone whose data may have been breached. They’ll receive complimentary access to credit monitoring services to help mitigate any potential harm.
The district created a call center to provide further assistance, installed additional cybersecurity enhancements and reset all passwords.
The good news is that the overwhelming majority of students were not affected, nor was payroll, said the CEO.
This isn’t the first time a local school system has dealt with a ransomware attack. In 2020, Baltimore County Public Schools experienced an attack that impacted thousands of students, employees and retirees.
The Baltimore Banner thanks its sponsors. Become one.
In a statement, school system officials said they regret any inconvenience or concern the incident may have caused. Santelises said in an interview that staff worked over spring break to make sure the school system was secure.
“It just shows the kind of environment we currently live in,” she said. “We’re going to have to be vigilant because the bad actors are going to continue to find ways to try to bypass systems.”
About the Education Hub
This reporting is part of The Banner’s Education Hub, community-funded journalism that provides parents with resources they need to make decisions about how their children learn. Read more.
Comments
Welcome to The Banner's subscriber-only commenting community. Please review our community guidelines.