Privacy commissioner probing massive breach of student information
Social Sharing
The federal privacy watchdog has launched an investigation into a cybersecurity breach at a company that stores the personal information of K-12 students across Canada.
Privacy commissioner Philippe Dufresne said in a statement Tuesday that the probe was launched after his office received a report from U.S.-based PowerSchool, which provides the affected software, and a complaint about the breach.
Last month, PowerSchool told school boards in Newfoundland and Labrador, Nova Scotia, Ontario, Alberta, Manitoba, Prince Edward Island, the Northwest Territories and elsewhere across North America that a data breach in late December had exposed students' personal information.
The stolen information includes addresses, medical details, grades and disciplinary notes. In some cases, the social insurance numbers of educators and staff were also taken.
The Toronto District School Board, the country's largest school board, said in January that the addresses, health card numbers, emergency contacts and some medical information of more than 1.49 million students may have been stolen.
Dufresne says his "immediate focus" is to ensure that PowerSchool is taking measures to reduce the risk to those affected by the breach and to prevent this from happening again.
WATCH | Analyst digs into PowerSchool breach:
Tech analyst Carmi Levy on the PowerSchool cyber breach and its targeting of sensitive data
1 month ago
Duration 7:50
"My office has had discussions with PowerSchool representatives and remains actively engaged in this matter to ensure that the organization is taking appropriate steps to respond to the breach," he said in the statement.
PowerSchool provides cloud-based software to dozens of Canadian K-12 school boards to manage student information and communications. In the wake of the data breach, the company is offering two years of protection against identity theft and credit monitoring to affected individuals.
Private organizations subject to the Personal Information Protection and Electronic Documents Act are required to alert the privacy commissioner of any breach involving personal information that could harm the affected individuals. They must also inform the affected individuals.
An investigation by the privacy commissioner is triggered when a formal complaint is made. Dufresne had previously stated in January, when news of the breach was initially spreading across school boards, that the incident was on his radar, he was in contact with PowerSchool and that he was determining next steps.
Names, phone numbers, SINs
PowerSchool is used across the country, and school boards are still working to determine and communicate the extent of the breach. Some provinces have created dedicated websites to answer questions about the breach and funnel Canadians to the credit monitoring services offered by PowerSchool.
The office of Alberta's privacy commissioner said Wednesday that it had received 31 breach notices from schools across the province.
One school reported its breach included names, phone numbers, genders, allergies, personal health card numbers, the phone numbers of students' doctors and guardian information, the statement said.
"We are reviewing the breach notices as they come in to determine the total number of Albertans affected, but it is clear that it is a significant number, including many students," Diane McLeod, information and privacy commissioner for Alberta, said in a release.
The breach affected just over 35,000 people in the Northwest Territories, according to the territorial government.
In Newfoundland and Labrador, data for more than 14,400 teachers was exposed, with the oldest records dating back to 2010. More than 700 of them had their social insurance numbers included in the breach. More than 271,000 students also had their data accessed, with the oldest records dating back to high school students in 1995.
Roughly 70,000 student records in Prince Edward Island were accessed, and Ontario's privacy commissioner is investigating the 20 school boards affected there.
More than 35,000 current and former students, 3,500 parents and guardians and 3,200 current and former staff members of Cape Breton-Victoria Regional Centre for Education had their data accessed, according to the Nova Scotia government.
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
17 hours ago
Killer of London, Ont., Muslim family appeals convictions, challenging use of manifesto at trial
Headlines Latest News Podcasts (new window) Convicted killer Nathaniel Veltman addresses his sentencing hearing in Ontario Superior Court in London on Jan. 24, 2024. Photo: (Pam Davies/CBC) Posted: June 6, 2025 8:54 PM Word of Nathaniel Veltman's appeal comes on 4th anniversary of attack on Afzaal family. Warning: This story contains distressing details. A London, Ont., man convicted of killing four members of a Muslim family and severely injuring a fifth member in a hate-motivated attack on June 6, 2021, is appealing on three grounds, including that the judge should not have allowed the jury to consider his white nationalist manifesto. A Windsor jury found Nathaniel Veltman guilty in November 2023 of four counts of first-degree murder and one count of attempted murder. Three months later, then Superior Court Justice Renee Pomerance ruled his actions amounted to a textbook case of terrorism as defined under Canadian law. He was sentenced on Jan. 24, 2024. Friday's news of the appeal comes on the fourth anniversary (new window) of the killing of Yumnah Afzaal, 15, her parents — Madiha Salman, 44, an engineer, and Salman Afzaal, 46, a physiotherapist — and family matriarch Talat Afzaal, 74, a teacher and artist. The youngest family member, a boy, survived. Veltman drove his pickup truck into the family as they were taking an evening stroll on June 6, 2021. Appeal sought on 3 grounds I appreciate that the community was horrified by this offence and the remaining members of the family were devastated by this offence. I respect that, and I feel very badly for both the family and for the community, Veltman's appeal lawyer, Stephen Whitzman, told CBC News. Mr. Veltman, of course, has a right to exercise his full legal rights, including his right to an appeal, and it's my job as his lawyer to assist him in doing that, and I hope that everyone will understand that those two things can both exist together. The appeal is being sought on three grounds, based on court records obtained by CBC News: The judge erred in admitting the ideological evidence, including Veltman's white supremacist manifesto, titled "A White Awakening," which set out his political and racist views; The judge erred in admitting Veltman's statements to a police officer which were obtained via a "Charter breach," meaning he was not properly warned of his rights; The judge erred in refusing the defence application for a mistrial because of what Veltman's lawyer at the time called "inflammatory language" during the Crown's closing statement, including references to the crime scene and the grievous injuries suffered by the victims. Veltman's trial lasted 12 weeks. The jury heard evidence he was motivated by right-wing extremist and Islamophobic views, and he described himself as a white nationalist. He grew up in a strict Christian home and fell into a web of online hate during the COVID-19 pandemic, the trial heard. WATCH | CBC's coverage of the judge's 2023 ruling in the Muslim attack case: Début du widget Widget. Passer le widget ? Fin du widget Widget. Retourner au début du widget ? Afzaal family's murder 'textbook' terrorism, judge rules 1 year agoDuration2:21A judge in London, Ont., ruled the actions of the man who ran down a Muslim family with his truck in 2021, killing four people, were a 'textbook example of terrorist motive and intent.' Nathaniel Veltman was already sentenced to life in prison for murdering four members of the Afzaal family. Veltman testified in his own defence and said he took magic mushrooms a day before the killing in order to escape the hell of his mind. The killing galvanized London and Canadian society to create laws and groups that would combat Islamophobia. Community reflects on 4 years since Afzaal family killed (new window) As it has on every anniversary of the killing, the community gathered Friday to reflect on the family, who became known as Our London Family, and to recognize the impact of the tragedy. Kate Dubinski (new window) · CBC News Environment Canada says air quality in the city is 'very high risk' as of noon Friday. One Canadian Economy bill crafted to strengthen Canada's economy, sovereignty in face of Trump's tariffs. Bill C-2 gives power to pause, cancel and suspend immigration documents. Distribution sites have been plagued by deaths, reports of violence in last 2 weeks. Canada hosting high-level gathering in Alberta in just over a week. 10 hours ago International
Vancouver Sun
18 hours ago
- Vancouver Sun
Canadian man once convicted in U.S. of supporting al-Qaida charged in Montreal over alleged bomb threats
MONTREAL — A man who was once convicted in the United States of supporting al-Qaida has been charged in Canada after allegedly threatening an attack. Mohammed Abdullah Warsame, 51, allegedly told a homeless shelter employee in Montreal that he wanted to build bombs to detonate on public transit. He was charged with uttering threats. He was ordered at a court appearance in Montreal on Friday to undergo a 30-day psychological assessment and return to court July 7, according to the newspaper La Presse. 'Both parties have reason to believe that Mr. Warsame's criminal responsibility is in question in this case,' Vincent Petit, who represents Warsame, told the court. Start your day with a roundup of B.C.-focused news and opinion. By signing up you consent to receive the above newsletter from Postmedia Network Inc. A welcome email is on its way. If you don't see it, please check your junk folder. The next issue of Sunrise will soon be in your inbox. Please try again Interested in more newsletters? Browse here. The Royal Canadian Mounted Police confirmed that he is the same Mohammed Warsame who spent 5 1/2 years in solitary confinement before pleading guilty in Minnesota in 2009 to one count of conspiracy to provide material support and resources to al-Qaida, which the U.S. calls a terrorist organization that was responsible for the 9/11 attacks. Warsame was sentenced to seven years and eight months in federal prison with credit for time served. He was deported to Canada in 2010 and had no fixed address at the time of the latest alleged incident. The Old Mission Brewery, which runs several homeless shelters in Montreal, contacted police after Warsame allegedly said on May 27 that he wanted to carry out an attack that would kill a large number of people. Warsame was hospitalized for psychiatric reasons, and he was formally arrested by the Royal Canadian Mounted Police on Wednesday. The Somali-born Canadian citizen admitted in his 2009 plea agreement that he traveled to Afghanistan in 2000 to attend al-Qaida training camps, where he dined with the organization's founder, Osama bin Laden. Prosecutors say he later sent money to one of his training camp commanders and went to the Taliban's front line. Warsame later settled in Minneapolis, where he continued to provide information to al-Qaida associates. Prosecutors painted him as a jihadist who called his time in one training camp 'one of the greatest experiences' of his life. They said that even after the Sept. 11, 2001, attacks, he passed along information to al-Qaida operatives about border entries and whereabouts of jihadists — and only stopped when he was arrested in December 2003. But his attorneys depicted him as a bumbling idealist whom other fighters in the camps in Afghanistan viewed as ineffective and awkward. Warsame's case took unusually long to work through the U.S. court system partly because everyone — including the judge, defense attorneys and prosecutors — needed security clearances. Retired agent Harry Samit, who was the lead FBI investigator on the case and is now director of special investigations for the professional assessment company Pearson VUE in Bloomington, recalled in an interview Friday that Warsame's case was the second major al-Qaida case to break in Minnesota. It came after that of Zacarias Moussaoui, who took flight simulator training in Minnesota and remains the only person to stand trial in a U.S. court in the 9/11 attacks. Moussaoui was jailed on an immigration violation when hijacked planes slammed into the World Trade Center and Pentagon and crashed in a Pennsylvania field. Samit, whose books on the Minnesota cases will be published starting this summer, said the FBI got word as it was preparing for Moussaoui to stand trial that another al-Qaida operative was in Minneapolis. He said he is certain that Warsame was a sleeper agent who was waiting for instructions from his commanders before he was found. While Warsame was 'kind of a goofy, not very threatening guy,' Samit said, he and other agents who questioned him also concluded that he was 'pure of heart and he was dedicated to the cause.' He said that was apparently enough for al-Qaida leaders who sent him Minnesota, where at a minimum they used him to raise money. When Warsame was deported, the retired agent said, the FBI gave Canadian authorities a 'full accounting' of what it knew and why the bureau still considered him a threat. So he said wasn't surprised to learn this week, after all these years, that Warsame might still remain a danger to society. Our website is the place for the latest breaking news, exclusive scoops, longreads and provocative commentary. Please bookmark and sign up for our daily newsletter, Posted, here .
Global News
18 hours ago
- Global News
Calgary woman loses $800k in romance scam: ‘I have nothing left'
Barbara Grant was one of many Canadians who found themsleves lonely during the pandemic. For the first time in her life, she set out to find a connection on an online dating site. That's when she met Michael Janda. 'We started talking… he said, 'You are gorgeous, I want to be with you,'' Grant said. The two quickly formed a bond. Janda's profile said he worked in the same oil and gas industry where she had built a successful career. As the weeks went by, they spoke about plans of marriage and buying a home together in Victoria, B.C. Then came the requests that preyed on her emotions. 'He told me he was caught in Doha, Qatar, carrying $1.5 million in cash,' she said, 'And police put him in jail.' Story continues below advertisement The two continued to communicate on LinkedIn after moving away from the dating site where they first connected. Over a period of nearly a year, Grant sent Janda money in several bank transfers — first to a trucking company in Ontario, then an individual in the U.S. Then one day in November, Grant realized her mistake — Janda wasn't who he said he was. 'He contacted me through LinkedIn and said, 'I can't come to Calgary any more, they've locked me up again.' He was coming to the airport and I was going to pick him up. 'I then realized it was a scam.' Tweet This Click to share quote on Twitter: "I then realized it was a scam." Grant lost $800,000 CAD — her life's savings. 'I have nothing left, except what's in my (Registered Retirement Income Fund). I'm devastated by it… absolutely devastated.' 4:24 Spotting romance scams Falling into a deep depression, Grant was checked into a mental health unit on multiple occasions in Calgary. She contemplated ending her own life. Story continues below advertisement Then she took action, hiring a B.C.-based private investigator to look into her case. Six months later, Denis Gagnon had compiled a 400-page report. Get daily National news Get the day's top news, political, economic, and current affairs headlines, delivered to your inbox once a day. Sign up for daily National newsletter Sign Up By providing your email address, you have read and agree to Global News' Terms and Conditions and Privacy Policy 'It's basically a daily event,' Gagnon said, explaining his work. Gangon was able to trace the transfers Grant sent. He says those recipients are commonly referred to as 'mules.' 'The money that's being transferred goes through a mule and goes to a different account. That person takes a percentage and then sends it overseas.' But who was ultimately behind it all is still a mystery. The lengthy report was then forwarded on to the Ombudsman for Banking Services and Interests, which earlier this week ruled in favour of Grant's bank, TD. 'I want TD Canada Trust to know about what happened to me… it has ruined my life,' Grant said. 'The bank is not responsible, not accountable… they have a fiduciary responsibility to me to give me some of my money back.' 2:36 Matchmaker warns of new, advanced romance scams In 2024, TD faced fines on both sides of the Canada/U.S. border — first in May, when Fintrac fined the bank $9.2 million for a range of failures including not submitting suspicious transaction reports when there was reasonable grounds to require it to do so, not assessing and documenting money laundering/terrorist activity financing risks and for the bank not taking prescribed special measures for high risk. Story continues below advertisement CIBC and RBC were also fined similar amounts. But that number was then dwarfed months later in the United States, when TD became the largest bank in U.S. history to plead guilty to violating a federal law aimed at preventing money laundering, and agreed to pay over $3 billion in penalties to resolve the charges. In that case, TD said its program was 'insufficient to effectively monitor, detect, report, and respond to suspicious activity' and work is underway to remedy the deficiencies. 3:52 TD Bank fined $3B U.S. in money-laundering case Global News asked TD officials for a statement on improvements to that program and further protections for its clients, but did not hear back by deadline. Grant says she's looking into a debt consolidation loan in order to wipe her hands clean from a years-long ordeal that has altered her world. Story continues below advertisement But she also wants her story to serve as a warning to others — if it can happen to this savvy, successful 75-year-old, it can happen to anyone. 'When someone comes forward and is willing to talk about what happened, we really should be commending them,' explained Wes Lafortune of the Better Business Bureau of Alberta. Lafortune estimates only five per cent of these type of crimes are ultimately reported and awareness can make a huge difference. 'It's really important to report these crimes to police, the Canadian Anti-Fraud Centre, Better Business Bureau… so these organizations can determine what sort of resources can be put into this.' Gagnon says it will take much more than status quo to turn the tide on this situation. Story continues below advertisement 'I think Canada has become a bit of a target for fraudsters. In the United States, I believe the penalties are much more severe. Canada is (still working through that),' Gagnon explained. 'Most people don't break into a house now through the door. They come in through your phone — or the screen you're looking at.' Tweet This Click to share quote on Twitter: "Most people don't break into a house now through the door. They come in through your phone — or the screen you're looking at." Grant was ready to spend her golden years travelling, downsizing her home and spending time with her children. Now at 75, she says she'll likely return to work as a consultant in the fall. She also sells her own paintings and dances. She's quite the catch — but you won't find her on any dating sites. 'No. No. I have some good friends, that's it, that's all,' she said.
