Delta School District Takes DeltaLearns.ca Offline After Cyberattack

Summary

Delta School District says unauthorized activity led it to take DeltaLearns.ca offline on Aug. 10. Personal information may have been exposed, but the district has no evidence it was accessed or misused.

Key points

• The district said it discovered unauthorized activity in the DeltaLearns.ca environment on Aug. 10, when the website became unavailable.
• Forensic analysis found personal information may have been exposed; the district said it has no evidence the information was accessed, acquired, or misused, but could not rule that out.
• The potentially affected information was submitted through forms to the district’s Learning Services Department; the article does not specify the data types.
• The website was taken offline immediately. By Aug. 12, the district had patched vulnerabilities, removed a backdoor, disabled PHP execution, hardened file permissions, deployed a security plugin, and added monitoring.
• The district reported no indicators of re-compromise after remediation and said it had begun reporting the incident to British Columbia’s Office of the Information and Privacy Commissioner.
• The district advised families and staff to watch for suspicious communications and protect their accounts, and asked them to report communications they believe are connected to the incident.

People