Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Data Security topic
No spam. Unsubscribe anytime.
Chambersburg Area SD to notify about 760 people after employee email phishing incident
Summary
District officials said an employee clicked a phishing email that briefly gave a bad actor access to the account; the district will send about 760 notification letters and has reported the incident to prosecuting authorities.
The Chambersburg Area School District said an employee clicked on a phishing email that gave a third party access to that employee’s account for about 24 hours, and the district will notify approximately 760 people whose information may have been exposed.
The superintendent told the board the incident was limited to a short window, and that district staff have closed the access and completed remediation steps. “Out of an abundance of caution, in a 24 hour period, we're gonna send letters to about 760 people, letting them know that their information may have been stolen,” he said.
The district notified the district attorney’s office and the state attorney’s office, the superintendent said, and added that the issue is “resolved on our end” and that there will be no disciplinary consequences for the employee because the click was “just a mistake.” District officials said they believe the exposure window was short and that the district will provide information about protective steps to those notified.
No specific categories of records or identity elements were listed in the board discussion. The administration said it would continue communications with affected families and individuals and provide additional details as they are confirmed.
