Vancouver School Board warns staff of potential privacy breach after 'fraudulent activity'

CBC

27-04-2025

Social Sharing
The Vancouver School Board (VSB) says it is investigating a cybersecurity incident involving its online banking systems that may have exposed some employee information.
In a statement to CBC News, the board said it learned about the incident on Wednesday and immediately secured its platform.
It says information belonging to employees, tuition fee-payers and vendors may have been placed at risk but that there is no current evidence that data was accessed.
"Out of an abundance of caution, we are advising all potentially impacted individuals and companies of this incident," VSB said. "It is important to note that this incident does not impact information of other students and their families."
The Vancouver Police Department has been notified and the VSB says it is following protocols set by the Office of the Information and Privacy Commissioner while the investigation continues.
"We are committed to maintaining the confidentiality of the impacted individuals and are taking protective measures to prevent further fraud attempts."
A letter obtained by CBC News and sent to all VSB employees offers additional details about the breach and advises staff to remain vigilant.
WATCH | Your kid's school just sent a cyber incident email. What does it mean?
Your kid's school just sent a cyber incident email. What does it mean?
4 months ago
Duration 4:12
Cybersecurity expert Ivo Wiens parses some recent cyberattack emails from Canadian school boards, shares what he looks out for and flags questions parents should be asking when (not if) these land in your inbox.
According to the letter, there is a potential risk that the attackers may have unlawfully obtained employee names, bank account details, pay amounts and VSB identification numbers. The notice specifies that affected bank account information is limited to accounts used for payroll within the last 180 days.
"We are advising all employees to monitor their bank accounts carefully and to contact their financial institution for advice on steps they should be taking given this potential unlawful access to information," the letter reads.
Employees are also encouraged to review fraud and identity theft prevention resources. The letter adds that support is available, including help to change payroll deposit information.