Canada's federal privacy commissioner has expressed concern over a data breach involving a student information system used by schools nationwide. The Office of the Privacy Commissioner of Canada is seeking additional details from PowerSchool, the US-based company behind the targeted software.
Privacy Commissioner Philippe Dufresne confirmed that his office is in contact with PowerSchool, which provides the affected platforms to educational institutions in Canada and the US.
Earlier this month, PowerSchool informed school boards in Newfoundland and Labrador, Nova Scotia, Ontario, Alberta, and other regions about a data breach between December 22 and 28.
PowerSchool has stated that the cybersecurity incident has been "contained" and that steps have been taken to prevent further unauthorized access or misuse of the compromised data. However, the Nova Scotia Department of Education said the breach could financially impact some current and former teachers and staff members, as some social insurance numbers collected before 2010 were included in the stolen data.
In a statement on Monday, Dufresne said his office is working to gather more information about the breach and will inform PowerSchool about its obligations under Canada's privacy laws. "This will allow us to convey our expectations to the company regarding their response to the breach and to determine next steps," he said.
Dufresne also emphasized the importance of protecting children's personal information, which he described as "particularly sensitive." "Championing the privacy rights of children is one of my strategic priorities," he said. "I am concerned about the potential impact that an incident such as this one may have on the personal information of students across the country."
PowerSchool has assured the public that it will continue to provide services to customers while investigating the breach and that it remains committed to protecting privacy.
