N.L. government not sure of extent of impact from school software cyberattack

Education Minister Krista Lynn Howell doesn't know the full extent of information stolen by hackers in a cyberattack on PowerSchool, a data management software used in the province's K-12 school system.

What is known is the students and teachers affected date back decades.

"We don't know the full extent of what each students file might have been accessed or to what extent that might have been, but we do know that approximately 271,000 files, students files were accessed," Howell said.

Approximately 271,000 students and 14,400 teachers in Newfoundland and Labrador had their date of birth, MCP number, and contact information stolen.

PowerSchool stores transcript data for students in Newfoundland and Labrador.

Howell said the oldest student records involved were those of high school students from 1995.

Further, 749 teachers had their social insurance numbers stolen. The oldest teacher records involved were from 2010.

Banking information should not be compromised for most students and teachers affected by the hack, according to Howell.

Those with stolen SINs are the only people who might have their financial information compromised. Howell said the Department of Education will notify those individuals first.

PowerSchool is also offering free identity and credit monitoring for two years for anyone with information involved in the hack — but that doesn't mean the cyber security breach will cause them to lose business. Howell said the province will continue to use PowerSchool moving forward.

"It's been used by 80 per cent of schools across North America," she said. "I believe that the product that we have was the best product that we could have used for the needs that we have."

Howell said cyberattacks are a consequence of becoming a more digital society.

PC education critic Paul Dinn says the attack is shocking and the province needs to be more transparent about its effects.

PowerSchool learned of the attack on Dec. 28. The province was alerted on Jan. 7. The next day, the public was told there was a breach.

The Department of Education released details on Jan. 28.

"The public is being informed in bits and pieces, which only adds to the frustration and confusion," Dinn said. "Many people still don't know if they're at risk or what steps they need to take."

NDP Leader Jim Dinn wants to see a review of all legislation related to the collection and management of personal information.

"In today's world, cyber threats will continue to happen, and government needs to be prepared. Newfoundlanders and Labradorians deserve to know their personal information is secure," he said.

Download our free CBC News app to sign up for push alerts for CBC Newfoundland and Labrador. Click here to visit our landing page.