Father says daughter, other students had info hacked at Markham school
|globalnews.ca 06 Dec 2018 at 13:11|
When Kirk Tobias’ daughter logged onto her school’s student portal one morning last month, she was greeted by an ominous note.
The frightened teen informed her parents, who promptly reported the matter to her high school in Markham, Ont. The institution called police – who confirmed a database hack – but Tobias said the school’s board only learned of the incident when he called its privacy officer.
Tobias said the episode had left his family shaken.
“To say that she was completely freaked out was a gross understatement,” Tobias said of his daughter, adding he and his wife were equally unnerved by the widespread breach.
Markham District High School’s staff declined to comment on the situation, referring inquiries to the board.
Board Associate Director Karen Friedman issued a statement confirming that a breach of student information had taken place in early November, that student passwords had been changed in response to the incident, and that the board had co-operated with the police investigation into the matter.
She did not immediately respond to questions as to how the board learned of the breach in the first place.
York regional police, for its part, said a 17-year-old boy had been issued a verbal caution in connection with the hack.
Bonnie Lysyk said school boards are not taking “all reasonable steps” to secure student information, either through using outdated technology that’s vulnerable to hacking or through failing to close security loopholes.
“Accounts of inactive users of the ministry’s IT system are not always being cancelled after they leave their positions at the boards,” the report reads. “These accounts are accessible on the internet, which means that there is a risk that confidential student information may be exposed to the public.”