NOTICE OF THIRD-PARTY DATA BREACH
We respect the privacy of your information, which is why, as a precautionary measure, we are writing to let you know about a data security incident that involves personal information. Before explaining the details of what happened and what information was involved, I want to note that this incident involved one of the District’s third-party service providers, not the District itself, and that Social Security Numbers and financial information were not a part of this incident. Please note: if your student’s records were breached, you were informed via another means.
The District shares certain student information with an organization called Battelle for Kids. This information sharing is important to the District and, at times, required by the Ohio Department of Education. On April 5, 2022, the District was notified that Battelle for Kids suffered a ransomware attack, which compromised information on some of our former and/or current students.
WHAT INFORMATION WAS INVOLVED?
The data accessed included student names, state student IDs, grade level, school year, assessment results, birth dates and schedule-related information. Again, the District does not and did not share Social Security Numbers or financial information with Battelle for Kids. In its notification letter to the District, Battelle for Kids stated that the data involved in the incident did not trigger a legal requirement to notify individuals under Ohio’s data breach notification statute, but that the data may be considered personally identifiable information under FERPA.
BATTELLE FOR KIDS’ RESPONSE
Battelle for Kids has notified the District that it launched an investigation into the incident and that it engaged a national cybersecurity firm to assist in its efforts. Additionally, it has implemented additional security measures designed to prevent a recurrence of such an attack and to protect the privacy of students.
THE DISTRICT’S RESPONSE
The District values your privacy and regrets that this incident occurred with one of its third party service providers. We will continue to monitor this incident and we are committed to ensuring that those who work with the personal information of District students take the necessary steps to protect student privacy.
FOR MORE INFORMATION
For further information and assistance, please feel free to contact Battelle for Kids directly at firstname.lastname@example.org.