Personal data of 70,000 Island students stolen in PowerSchool breach

Tens of thousands of current and former Prince Edward Island students, in addition to teachers and staff, had their personal data compromised in a cyberattack earlier this month that affected educational institutions across the country.

On Jan. 7, an unauthorized user gained access to PowerSchool, a data management system used by schools across the Island.

The ongoing investigation has determined that data from around 70,000 students was accessed, with the oldest records involved dating back to 2003, the provincial government said in a news release.

"Approximately 67 per cent of the students whose data was accessed are no longer in the K-12 system," the release reads.

The province said the compromised information varies but may include names, birth dates, gender, grade level, school enrolment dates, medical information, home contact details, custody arrangements and discipline comments.

Records of teachers and staff dating back to 2021 were also accessed.

This data includes names, employee IDs, job titles, school names, and email addresses. In fewer than 10 per cent of cases, the province said additional details such as home addresses, phone numbers, school transfers, extended leaves or retirements were also compromised.

The release does not specify the number of teachers and staff affected.

What families should do following cyberattacks that hit school boards across Canada

7 days ago

Duration 2:01

School boards across the country, including the Calgary Board of Education, have revealed details about a major data breach connected to PowerSchool in late December. Some boards revealed student data dating back decades may be impacted. Experts say there are steps families can take to protect themselves.

PowerSchool will notify those affected and offer two years of free identity protection services for impacted students and educators, the release states. Individuals who have reached the age of majority will also receive two years of complimentary credit monitoring.

The provincial government has set up a webpage with the latest information about the breach and guidance for protecting personal data from phishing and online threats.

The investigation is ongoing, and the province said it would provide further updates as they become available.

Schools in Alberta, Manitoba, Newfoundland and Labrador, Nova Scotia and Ontario have also been affected by the breach.