Cybersecurity Incident Announcement 1/9/2025 (updated 2/13/2025)
Powerschool Cyber Incident
Dear Parents and Guardians,
We are writing to inform you of a recent security incident involving a third party vendor, PowerSchool, the provider of our student information system (SIS). On Wednesday January 8th, PowerSchool notified us of a data exfiltration that has impacted school districts nationwide.
PowerSchool confirmed it suffered a cybersecurity incident that allowed a threat actor to steal the personal information of students and staff from school districts using its PowerSchool SIS platform. PowerSchool has confirmed that the stolen data primarily contains contact details such as names and addresses.
Upon further investigation, it was discovered that the incident also involved unauthorized access to our district PowerSchool system, leading to the exposure of limited demographic data related to our students.
We want to assure you that the information involved is limited primarily to directory information for students and staff, such as demographic data like names, addresses, phone numbers. It did not include any financial, academic, or behavioral records.
PowerSchool has enacted their security protocols to contain the incident and has since taken significant steps to secure their systems, including password resets and enhanced security measures.
As a district we are deeply committed to maintaining the highest standards of data protection. While we have a number of systems in place to protect student data, this incident was out of our control. However, PowerSchool has assured us that the cyber attack is contained, and there is no evidence of ongoing unauthorized activity. We will be staying vigilant and reviewing any related accounts for unusual activity as a precaution. We are working closely with the State of Wyoming Cyber Assistant Response Effort (CARE) as well as the Wyoming Department of Education (WDE) to appropriately address this event.
While we currently have no evidence of misuse of the exposed information, we encourage parents and guardians to remain vigilant. Monitor any communications and accounts linked to your directory information and report any suspicious activity.
PowerSchool will be releasing more information to affected districts worldwide, and as we get that information we will communicate that to you using a link found on the district’s website.
Information relating to this incident can be found on the district website along with a Fact and Questions (FAQ) from PowerSchool. District website: https://www.sub1.org
Thank you for your understanding and patience as we address this matter. We remain dedicated to ensuring the safety and privacy of our students and staff. If you have additional questions, please email us at CyberTeam@sub1.org.
Sincerely,
Superintendent Harris
PowerSchool Cyber Incident Link
Powerschool is updating information on this website:
https://www.powerschool.com/security/sis-incident/notice-of-united-states-data-breach/
Phishing Alert!
After incidents such as this, cyber criminals will use the data acquired and begin phishing attempts as secondary attacks by using the email and phone numbers discovered from the primary attack.
Why do criminals use phishing? What does it look like and what behaviors should you adopt to protect yourself?
Phishing is a form of cyber attack where attackers attempt to trick individuals into revealing sensitive information or granting unauthorized access. It typically involves sending fraudulent emails and messages or creating fake websites that appear legitimate. The goal is to lure victims into entering their login credentials, financial details, or other private data. Phishing attacks often exploit human vulnerabilities, such as fear, curiosity, or urgency, to manipulate people into taking the desired action. Awareness and vigilance are crucial in recognizing and avoiding phishing attempts, which can lead to identity theft, financial loss, or system compromise. If you believe you have fallen for a phishing attack, change your password, turn off your machine, and contact the IT department at 367-5555.
Field Names from Student & Staff Data: