Greenwood School District 50 (“the District”) began providing notice today to impacted individuals about a recent incident that may affect the security of personal information relating to certain current and former employees of the District, certain employee family members, students, and other individuals.
In mid-February of this year, the District began receiving reports from a limited number of current employees that they were contacted by the IRS regarding potential identity theft.
In response, the District hired an outside computer forensics expert to investigate whether a compromise of personal information held by the District may have occurred. During the course of its investigation, the District learned that: (1) four District employees’ email accounts had been logged into by an unauthorized individual between January 19, 2017 and January 28, 2017, and that these email accounts contained personal information; and (2) certain current and former employees’ payroll portal accounts had been logged into by an unauthorized individual between
January 20, 2017 and February 12, 2017.
Who Does This Affect?
A very limited number of current and former employees’ payroll portal accounts containing their IRS Form W-2 were logged into by an unauthorized individual. Those same current and former employees’ family members may be impacted where the family members were covered under the District’s benefits plan during 2015 and/or 2016 and their information was contained on an IRS Form 1095 stored within the iVision account.
A larger group of employees and their dependents are impacted because their personal information was found to be stored within one of the 4 employee email accounts that were logged into by an unauthorized individual. There is also a limited number of students and student-parents impacted.
What Information Was Involved?
This incident involved both unauthorized access to email accounts containing personal information and unauthorized access to certain current and former employees’ iVision payroll portal accounts containing sensitive tax forms. Not every impacted individual was impacted in the same way. Individuals that were determined to be impacted were mailed a letter by the District on April 28, 2017, that specifically describes how they were impacted and the types of their information at risk.
The District is encouraging people who would like to know whether they are impacted by this incident to call their dedicated assistance line at 1-888-757-1869, Monday through Friday from 9:00 a.m. to 9:00 p.m. EDT, beginning on Friday April, 28. When calling, you should be ready to provide your full name and address for verification purposes.
What Is the District Doing About This Incident?
The District takes the privacy and security of the personal information in its care very seriously. The District has taken the following actions in response to this incident:
- Investigation. The District undertook a thorough investigation into the nature and scope of the incident to determine how and when it happened, who it impacted and how it impacted them. Since the incident was discovered, the impacted employee payroll portal was shut down while security modifications were made, and passwords for the affected employee email accounts were changed to prevent further unauthorized access.
- Identity Protection. As an added precaution, the District has arranged to provide all impacted individuals with appropriate identity protection and identity restoration services through Experian for 12 months. The cost of this service will be paid for by the District.
- Notice to Affected Individuals. On April 28, 2017, the District began mailing written notification letters to all impacted individuals.
- Call Center for Questions and Concerns. The District has established a dedicated assistance line for individuals to call with any questions and concerns regarding this incident. Please note that the call center will be available beginning at 9:00 a.m on April 28, 2017. You may reach the call center at 1-888-757-1869, Monday through Friday from 9:00 a.m. to 9:00 p.m. EDT, beginning on Friday, April 28.
“Greenwood School District 50 sincerely apologizes for any inconvenience or concern this incident causes to impacted individuals. The District will continue to work diligently to remedy this incident and to better protect individuals against similar incidents from occurring in the future,” stated Dr. Darrell Johnson, Greenwood District 50 Superintendent.