Resident raises BoardDocs security questions; district says it was not notified of breach

A Souderton Borough resident pressed the school board about cybersecurity and a reported data exposure in the BoardDocs meeting-management system, and district officials said they had not been notified by BoardDocs and are working with third-party cybersecurity services.

Rosemary Butekofer told the board that press reports showed a BoardDocs security flaw had exposed highly sensitive papers—attorney-client legal memos, confidential employee information and student-related materials—from multiple districts, beginning with a disclosure at Lower Merion School District. She said follow-up reporting found that BoardDocs had not proactively notified affected districts and that nationwide more than 64,000 files were affected.

"Were you aware of the security breach? Have you been contacted by BoardDocs to see if any of our files were affected?" Butekofer asked.

A district representative replied, "We were not contacted by BoardDocs. I am not aware of anything being compromised, and we don't put a whole lot of documents in the administrative end of BoardDocs. And our cybersecurity is, because of, unfortunately, what we went through, is second to none. So we are always constantly working with CrowdStrike to make sure that we're protected." The district did not provide forensic details in the meeting or say BoardDocs had confirmed no exposure.

Why it matters: District meeting systems can contain sensitive legal and personnel documents; residents said the BoardDocs reports show a need for proactive notification and stronger review of what is posted publicly.

What to watch: The district may follow up with BoardDocs or release an audit of posted documents; residents urged more frequent technology-committee meetings and greater transparency about document handling.