January 9, 2025
Dear Parents/Guardians and Staff,
I am writing to inform you of a cybersecurity incident we discovered involving PowerSchool, our platform for managing student information. Earlier this week, PowerSchool informed us that on December 28, 2024, PowerSchool learned of unauthorized access to data through its customer support portal, PowerSource. However, we were informed that the incident did not impact RSU No. 67. As a precautionary measure, our IT department reviewed the RSU 67 PowerSchool account, and unfortunately, discovered that a similar cybersecurity incident occurred on December 22, 2024 that did impact RSU 67. This incident was unknown to PowerSchool and we reported it to them immediately. The accessed data may have included personally identifiable information such as birthdates, addresses, and phone numbers of staff, students, parents/guardians, and emergency contacts.
PowerSchool has assured us that:
· All appropriate steps have been taken to further prevent the exposure of information affected by this incident.
· The unauthorized access point has been secured, and there is no evidence of continued activity.
· They do not anticipate the data is being shared or misused, and they believe it has been deleted without any further replication or dissemination.
To safeguard affected individuals, PowerSchool will provide credit monitoring for adults and identity protection services for minors. We will share more details about these services as soon as they become available.
We take the security of personal information seriously and are collaborating closely with PowerSchool as they continue to address this situation. If you have any immediate questions or concerns, please don’t hesitate to reach out to Jason Noyes, RSU 67 Director of Technology at jnoyes@rsu67.org.
Thank you for your understanding as we work through this together.
Sincerely,
Paul Austin
Superintendent of Schools