|
Dear District and Charter Leaders,
This morning, threat actors reached out to a number of public school and North Carolina Department of Public Instruction (NCDPI) employees across the state sharing that they have obtained North Carolina student and teacher records similar to records initially compromised in the PowerSchool Student Information System (SIS) cybersecurity incident that was reported in January of this year. We have been informed that other PowerSchool SIS customers have received similar messages as well.
Based on the current status of our investigation, we believe that the threat actors have access to the same data tables that were compromised, which we shared with district and charter leaders on January 10, 2025. These data tables include student and staff names, contact information, social security numbers (limited student social security numbers), birthdays, medical notes, passwords (limited) and parent/guardian information.
NCDPI has already notified appropriate law enforcement agencies, who are actively investigating this incident.
IMMEDIATE ACTIONS REQUIRED IF YOU RECEIVE CONTACT FROM THREAT ACTORS
If you or anyone in your district received this message:
- DO NOT open the link that the threat actors embedded in the email.
- DO NOT engage with the threat actors. N.C.G.S. 143-800 prohibits engaging with the threat actor or paying the ransom demanded.
- Please complete and submit this form to notify NCDPI’s Cybersecurity Team if you received the message from the threat actors.
PROTECTION RESOURCES
- PowerSchool has extended the enrollment period for impacted individuals to sign up for complimentary identity protection and credit monitoring services until July 1, 2025. However, NCDPI is advocating for a significantly longer enrollment window so that all impacted users have enough time to enroll in the protection services provided by PowerSchool.
- Affected individuals can enroll in identity protection and credit monitoring at no cost to themselves here. Services include:
- Two years of complimentary identity protection for all students and educators affected
- Two years of complimentary credit monitoring for all adult students and educators affected
- These services are available regardless of whether an individual's Social Security number was compromised.
- Additional protection: Impacted users can freeze their identity for free through the North Carolina Department of Justice.
COMMUNICATION TEMPLATES
Because this message was sent to a widespread audience throughout the state, we recommend communicating with both staff and parents. We have provided templates for your convenience below.
ADDITIONAL SUPPORT
- Technical Support: Email Tim Wease, Director of PSU Cybersecurity Support, for technical support or questions regarding this incident.
- Media and Communications Support: Email NCDPI’s Communications Team for help with support with media and messaging.
- Legal Support: Contact your board attorney for any legal support.
We appreciate your steady leadership and commitment as we continue to work through this incident. We will keep you informed of developments. Together, we will continue to support our students, staff and families with care and transparency.
|
