Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Data Breach topic
No spam. Unsubscribe anytime.
Superintendent says RSU 26 will notify families after PowerSchool breach; district engaged counsel and a mail vendor
Summary
The superintendent updated the board on a PowerSchool data breach, saying the district has engaged counsel, plans mailed notifications for Social‑Security‑number‑impacted individuals, is adding FERPA recordation to affected student files, and has posted a guidance notice online; the district is tracking expenses and exploring billing options.
The RSU 26 superintendent told the board the district is moving forward with targeted notifications and recordkeeping after a PowerSchool data breach and has engaged legal counsel and a mail vendor to ensure proper address verification and delivery.
The superintendent said PowerSchool provided limited notifications; the district could not confirm that families with Social Security numbers received direct notice. The district’s counsel drafted the required FERPA language to place in affected students’ files and recommended a specific website notice with additional guidance for families. The administration said they will highlight that website notice in upcoming newsletters and that PowerSchool had extended its credit‑monitoring sign‑up period (discussed in the meeting as extended to July), though district members suggested extending enrollment longer given the delayed notifications.
District staff said they will track staff time and costs related to the response because the district’s cyber‑insurance will cover expenses after a deductible (discussed in the meeting as a $5,000 threshold). Board members discussed whether the district should prepare a formal bill to PowerSchool to document expenses; administrators said reconstructing past hours would be time consuming but that they would keep contemporaneous tracking going forward. The superintendent said the district engaged vendors and counsel recommended steps to protect families and the district.
What was not specified in the meeting: the transcript does not state the total number of students or families affected. The superintendent said that high‑school students who are 18 or older received more specific notice from PowerSchool, while notices to families with Social Security numbers were not reliably confirmed.
Key quote "We engaged our own counsel to help us... engage a mail vendor who can help us do proper notifications," the superintendent said.
Next steps Administrators will send mailed notifications to Social‑Security‑number‑impacted individuals when vendor timelines are confirmed, place required FERPA entries in affected student records, maintain a guidance page on the district website and track all response costs for possible insurance reimbursement or other remedies.
