ÄÛÑ¿ÊÓƵ

Scroll to Instructions for Credit Monitoring and/or Identity Protection

Updated February 5, 2025 

This is an important update about the cyber incident involving the PowerSchool Student Information System (SIS) – the application used by the ÄÛÑ¿ÊÓƵ (HCDSB) and many school boards across North America to store certain student and staff information.  &²Ô²ú²õ±è;

---

What Happened? &²Ô²ú²õ±è;

On December 28, 2024, PowerSchool, a third-party service provider used by many school boards, including HCDSB, became aware of a cybersecurity incident involving unauthorized access to certain PowerSchool SIS information. PowerSchool has confirmed that the data accessed by the unauthorized user was deleted and that the data was not posted online.  

PowerSchool began notifying school boards of this incident on January 7, 2025. Since then, we have been working with PowerSchool and internal and external experts to determine the precise information that was affected. &²Ô²ú²õ±è;

---

What Student Information Was Affected? &²Ô²ú²õ±è;

We can confirm that limited student and staff information was compromised as part of this incident. We have also confirmed the type of information stored in PowerSchool SIS that may have been accessed by an unauthorized user.   &²Ô²ú²õ±è;

For all students who were enrolled in HCDSB between September 2015 and December 2024, the following student information was accessed during the cyber incident:  &²Ô²ú²õ±è;

• First Name, Middle Name, Last Name   &²Ô²ú²õ±è;
• Ontario Education Number (OEN)  &²Ô²ú²õ±è;
• ³Ò±ð²Ô»å±ð°ù &²Ô²ú²õ±è;
• Date of Birth &²Ô²ú²õ±è;
• ´¡»å»å°ù±ð²õ²õ â¶Ä¯&²Ô²ú²õ±è;
• Parent Name(s)  &²Ô²ú²õ±è;
• Parent Contact Email(s) and Phone Number(s)  &²Ô²ú²õ±è;

For some students the following additional information may also have been accessed:  &²Ô²ú²õ±è;

• Medical alert information &²Ô²ú²õ±è;
• Guardian alert information &²Ô²ú²õ±è;
• Emergency contact information (Last Name, First Name, Phone Number) &²Ô²ú²õ±è;
• Scheduled Year of Graduation &²Ô²ú²õ±è;
• Scheduled to Return Next School Year (checkbox) &²Ô²ú²õ±è;
• ³Ò°ù²¹»å±ð &²Ô²ú²õ±è;
• Home Room &²Ô²ú²õ±è;

For a very small number of students, the following additional information may also have been accessed: 

• Doctor name and phone number  &²Ô²ú²õ±è;

With respect to medical alert information, if you provided information to your child’s school about your child’s allergies, medical conditions or injuries when completing the start of school year forms, this information was included in the data that may have been accessed or acquired. Please note that medical information provided to members of HCDSB Special Education team (e.g. Psychologists, Occupational Therapists, Physiotherapists, Audiologists, Speech-Language Pathologists, Child Youth Counselors and Social Workers) was not impacted by this incident.  &²Ô²ú²õ±è;

With respect to Guardian Alert information, if you provided information about your custodial status to the school through the registration or verification process, this information was included in the data that may have been accessed or acquired. &²Ô²ú²õ±è;

---

What Student Information Was Not Accessed? &²Ô²ú²õ±è;

This incident did not result in the compromise of any of the following information:  &²Ô²ú²õ±è;

• Financial information &²Ô²ú²õ±è;
• Social insurance number  &²Ô²ú²õ±è;
• Health assessment information  &²Ô²ú²õ±è;
• Medical records  &²Ô²ú²õ±è;
• Student academic grades  &²Ô²ú²õ±è;
• Individual Education Plans (IEPs)  &²Ô²ú²õ±è;
• Student accommodations  &²Ô²ú²õ±è;

---

What Staff Information Was Affected? &²Ô²ú²õ±è;

We can confirm that limited student and staff information was compromised as part of this incident. We have also confirmed the type of information stored in the PowerSchool Student Information System (SIS) that may have been accessed by an unauthorized user.   &²Ô²ú²õ±è;

For all staff who were employed by HCDSB between September 2020 and December 2024, the following staff information was accessed during the cyber incident:  &²Ô²ú²õ±è;

• First Name, Last Name &²Ô²ú²õ±è;
• Employee Number  &²Ô²ú²õ±è;
• HCDSB Email &²Ô²ú²õ±è;
• Ministry Number (MEN) &²Ô²ú²õ±è;

Please note that social insurance numbers (SINs) were not compromised in this incident.  &²Ô²ú²õ±è;

---

Credit Monitoring and Identity Protection  &²Ô²ú²õ±è;

PowerSchool is offering two years of complimentary identity protection services, provided by Experian, to students and staff whose information was involved.  &²Ô²ú²õ±è;

The identity protection services will be provided to:  

• Former or current students who attended an HCDSB school between September 2015 and December 2024. 
• Staff who were employed by HCDSB between September 2020 and December 2024 and had access to the PowerSchool Student Information System (SIS).  

In addition to Experian’s identity protection services, PowerSchool is also offering two years of complimentary credit monitoring services, provided by TransUnion.  

The credit monitoring services will be provided to:  

• Former or current students who attended an HCDSB school between September 2015 and December 2024 and are 18 years of age or older.
• Staff who were employed by HCDSB between September 2020 and December 2024 and had access to the PowerSchool Student Information System (SIS).  

PowerSchool is not offering identity protection or credit monitoring services to parents, guardians or emergency contacts. &²Ô²ú²õ±è;

---

How to Sign Up for Credit Monitoring and/or Identity Protection  &²Ô²ú²õ±è; 

PowerSchool has provided instructions for signing up for credit monitoring services and/or identify protection services . 

We have also posted instructions on our website:  

PowerSchool has created a call centre to address questions regarding these services. If you have any questions or concerns, please call 833-918-7884, Monday through Friday, 8:00am through 8:00pm Central Time (excluding major US holidays). Please be prepared to provide engagement number B138905. &²Ô²ú²õ±è;