Ontario school board trying to recover from cyber incident

An Ontario public school board continues trying to recover from what it calls a cyber incident.

The Durham District School Board, which serves 75,000 students and approximately 14,000 staff across the Region of Durham east of Toronto, said in a website statement Monday afternoon that it is still working with external consultants to help determine the scope and extent of the attack.

The biggest city in Durham is Oshawa, with a population, including suburbs, of about 406,000.

In-school classes were open Monday and will be open again on Tuesday. However, online classes through the DDSB@Home service are still unavailable. Nor will a previously scheduled literacy test be held.

Telephone and email service are still offline. If a parent needs to get in touch with a child
at school, they have to go to the school site. Restoration of phones at schools is a priority. Schools will use cell phones to contact parents in the event there is an emergency and  if emergency contact information has been provided to the school.

The Monday statement says also said the board is working to ensure payroll is not interrupted for staff.

UPDATE: On Tuesday the board said phones are starting to come back online but may not be working at every location. Progress is being made on restoring IT systems. For DDSB@Home, please check for an update at 11 a.m. on Wednesday, November 30th if classes will be taking place in the afternoon.

UPDATE: On Wednesday the board said DDSB@Home elementary and secondary were able to hold virtual classes as normal. Students could start loggin into their Google Classrooms at the start of the school day on Thursday, December 1. There may be a very small number of classes that cannot take place but independent work would be posted in those classrooms for students to complete.

While students’ Chromebooks were now able to be used at home, IT can’t provide any support to repair or troubleshoot Chromebook issues.

The incident was discovered November 25th. Since then, the IT services team has been focusing on restoring critical systems to support school and business operations.

The board was asked in an email by ITWorldCanada to explain the cause of the incident, but it referred to the online statement, which doesn’t explain what is behind the attack or whether digital data was stolen.

In an online FAQ, the school board said that after the incident was discovered, the IT network was shut down. In a section that asked if data was compromised, the text of the FAQ answered, “We are continuing to investigate and are working to understand the full impact of this incident. We ask for your patience as this investigation is complex and will take time to complete. We are committed to sharing more information on this topic, including if there are any privacy impacts.”

The one student safety protocol not in place yet is the safe arrival program. Attendance will continue to be manually taken and parents/guardians will not be notified should their child be absent.

The attack comes weeks after the public release of the report of a provincial expert panel on cybersecurity in Ontario’s broader public sector (BPS), which includes school boards.

A key recommendation is the creation by the province of a single body to oversee cybersecurity across the entire broader public service, dispensing advice and demanding accountability. It would augment current governance structures responsible for sector-specific cyber security risks.

Another recommendation is that the province investigate establishing a self-funded cyber insurance program to support the delivery of services such as breach coaching, incident response, and recovery for BPS organizations.

Ontario Service Delivery Minister Kaleed Rasheed said his department has accepted recommendations in the expert committee’s final report. However, no timeline for implementing the recommendations was given. “Work is underway to assess and implement measures that will improve and strengthen the province’s cyber security ecosystem,” the government said in a statement.

Would you recommend this article?


Thanks for taking the time to let us know what you think of this article!
We'd love to hear your opinion about this or any other story you read in our publication.

Jim Love, Chief Content Officer, IT World Canada

Featured Download

Howard Solomon
Howard Solomon
Currently a freelance writer, I'm the former editor of ITWorldCanada.com and Computing Canada. An IT journalist since 1997, I've written for several of ITWC's sister publications including ITBusiness.ca and Computer Dealer News. Before that I was a staff reporter at the Calgary Herald and the Brampton (Ont.) Daily Times. I can be reached at hsolomon [@] soloreporter.com

Featured Articles

Empowering the hybrid workforce: how technology can build a better employee experience

Across the country, employees from organizations of all sizes expect flexibility...

What’s behind the best customer experience: How to make it real for your business

The best customer experience – the kind that builds businesses and...

Overcoming the obstacles to optimized operations

Network-driven optimization is a top priority for many Canadian business leaders...

Thriving amid Canada’s tech talent shortage

With today’s tight labour market, rising customer demands, fast-evolving cyber threats...

Staying protected and compliant in an evolving IT landscape

Canadian businesses have changed remarkably and quickly over the last few...

Related Tech News

Tech Jobs

Our experienced team of journalists and bloggers bring you engaging in-depth interviews, videos and content targeted to IT professionals and line-of-business executives.

Tech Companies Hiring Right Now