The Chicago Public Schools system is in the process of notifying students, families and some current and former employees that their personal information was compromised as a result of a ransomware attack against a technology vendor, Battelle for Kids.
According to the notification letter, parents of students who attended a Chicago public school between 2015 and 2019 are being notified that their personal information may have been compromised by a ransomware attack against its vendor, Battelle, on December 1, 2021. The letter states that the personal information that an unauthorized party gained access to included: “name, date of birth, gender, grade level, school, Chicago Public Schools student ID number, State Student ID number, and information about the courses your student took, and scores from performance tasks used for tech evaluations.” The letter specifically states that “No Social Security numbers, no financial information, no health data, no current course or schedule information, and no course grades or standardized test scores were involved in this incident.”
The school system is offering those affected, reported as over 500,000 individuals, with free credit monitoring and identity theft protection for 12 months. It also has issued FAQs, which can be accessed here.