PROVIDENCE, R.I. (WPRI) — While Providence school leaders have balked at publicly disclosing that cybercriminals hacked their network last month, they confirmed last week to state regulators there was in fact a breach.
The Providence Public School District notified the R.I. Attorney General’s Office about the breach on Friday, Oct. 4, according to spokesperson Tim Rondeau. Reporting such events is required by state law.
On the same day they reported the breach to the attorney general’s office, school officials sent a letter to staff that an investigation revealed information may have been accessed by an “unauthorized actor” between Aug. 30 and Sept. 11, and “that the information could include names, addresses, and Social Security numbers” of 12,000 former and current employees.
The district said it was unable to determine “what files, if any, are in fact in the possession of this anonymous group ,” but that it was “operating as if this group possesses that information.”
District spokesperson Jay Wegimont told Target 12 on Tuesday that while the analysis is underway, “at this time, there is no evidence that any personal information for students has been impacted.”
The district first notified the school community on Sept. 12 that it had detected “irregular activity” on the network on Sept. 11.
According to the Identity Theft Protection Act of 2015 , state and municipal agencies, must notify the attorney general within 30 days that a breach has been confirmed. The clock starts when a breach is confirmed, not when it occurs, according to Rondeau.
“We review the notice to determine that it complies with the statute—we have done that here, and it does,” Rondeau said.
Despite the internal and regulatory communications, Superintendent Javier Montañez on Monday told Target 12 he wasn’t willing to refer to the situation as a “hack.”
“I’m not calling it anything yet, because it’s still an investigation,” Montañez said.
Target 12 reached out to the district for comment on Tuesday but did not immediately hear back.
In September, the district said both state and federal law enforcement began an investigation, which the district later shared was focusing on “an unverified, anonymous group” claiming to possess district files.
In recent days, the district informed staff it would provide a free membership for five years of identity theft resolution services provided by IDIQs IdentityIQ service. The district said enrollment was encouraged but not required.
The district also opened a dedicated call center Tuesday for anyone with questions about the incident. The number is 1-800-331-3865 Monday through Friday between 8 a.m. and 7 p.m. and Saturdays from 9:30 a.m. to 6 p.m.
Alexandra Leslie ( aleslie@wpri.com ) is a Target 12 investigative reporter covering Providence and more for 12 News. Connect with her on Twitter and on Facebook .
Close Thanks for signing up!
Watch for us in your inbox.
Subscribe Now
Daily Roundup
Copyright 2024 Nexstar Media Inc. All rights reserved. This material may not be published, broadcast, rewritten, or redistributed. For the latest news, weather, sports, and streaming video, head to WPRI.com.
Local News
