By: WCTV Eyewitness News
March 12, 2018
TALLAHASSEE, Fla. (WCTV) -- Leon County Schools has launched an internal investigation after being targeted by a data breach.
LCS says the breach happened with a third-party vendor, Florida Virtual School, and involved certain staff and student personal information from 2013. LCS says FLVS has also indicated that other records of teachers and students may have been breached from May 2016 to February 2018.
The school system says some current and former teachers' social security numbers "were compromised," and says they have launched an internal investigation and have contacted the FDLE, who also has opened an investigation.
LCS says FLVS has reached out to the FBI to conduct an investigation.
The LCS press release can be read below:
"Leon County Schools (LCS) learned of a recent data incident with a third party vendor, Florida Virtual School (FLVS), involving certain staff and student personal information from 2013. Additionally, Florida Virtual School has indicated that other student and teacher records may have been compromised from May 2016 to February 2018.
LCS immediately launched an internal investigation. In addition, we immediately contacted the Florida Department of Law EEnforcement (FDLE) who opened an investigation. Florida Virtual School has contacted the Federal Bureau of Investigation (FBI) who is also conducted an investigation.
Through the efforts of forensic experts, a FLVS misconfigured server was identified as the source of some of this compromised information. The data on this server was from a 2013 partnership between Leon County Schools and UCompass, subsequently purchased by FLVS. From this 2013 partnership, it was identified that some current and former teachers' social security numbers were compromised. LCS has notified those affected current and former employees through traditional mail. While the FBI and FDLE investigations are ongoing, LCS has initiated personal identity protection, inclusive of credit monitoring, immediately for these affected parties.
Forensic experts also identified additional student and teacher information that may have been compromised at FLVS. As required by law, Florida Virtual School has posted information about this data security incident on their website.
Leon County Schools is in the process of directly notifying these teachers and students.
Although the investigations are on-going, we do believe that the scope of the breach may be substantial. We are taking this matter very seriously. We want to assure you that the privacy and security of the information in our care is one of our highest priorities.