panic and anger among some parents<\/a>, who questioned what to do next.<\/p>\nIn a letter to parents on Friday, the school board apologized again and confirmed the sharing of the data was caused by \u201cinternal human error.”<\/p>\n
But some of the information shared in the email by the school board should be isolated, said Claudiu Popa, a cybersecurity expert and the CEO of Datarisk Canada.<\/p>\n
He says the incident highlights the need for the board to review its methods for storing sensitive data.<\/p>\n
“What parents should really be concerned about is the fact that their school [board] may be storing information insecurely,” he said.<\/p>\n
“It should not be possible for a school or any organization to email out social insurance numbers.\u201d<\/p>\n
This type of information needs to be placed \u201cfar enough from staff to prevent staff from accessing it, even when their computer gets hacked,” Popa said.<\/p>\n
He also said social insurance numbers should exist by themselves, in individual records, but not as compiled lists.<\/p>\n
Criminals, he said, target administrators, networks, and human resources departments and immediately look for lists and spreadsheets.<\/p>\n
As stakeholders, parents also have a role to play and are entitled to ask questions about where their information is stored, why it’s being stored and ask for proof that processes have improved since the leak, says Popa.<\/p>\n
Parents CBC spoke to on Friday said they were still angry and were considering their next steps.<\/p>\n
‘Not a malicious action,’ expert says<\/p>\n
While parents have the right to be concerned following the email, Popa said they shouldn’t panic.<\/p>\n
“This is not a malicious action, and there’s no evidence that malicious people have gained access to the information,” he said.<\/p>\n
Popa, however, recommends parents keep all communications and the guidance they’ve received from the school board \u2014 with the exception of the spreadsheet containing the personal data.<\/p>\n
“They should delete the information that doesn’t belong to them anyway,” he said.<\/p>\n
The school board asked parents to delete the information and confirm that they have done so, in a bid to contain the leak.<\/p>\n
Popa says parents who are concerned about their personal information being in the hands of others should contact Quebec’s privacy commissioner \u2014 theCommission d\u2019acc\u00e8s \u00e0 l\u2019information du Qu\u00e9bec<\/a>.<\/p>\nThe school board itself is under the obligation to report the security breach to the commissioner.<\/p>\n","protected":false},"excerpt":{"rendered":"The sharing of a mass email containing sensitive personal information of parents of high school students has some…\n","protected":false},"author":2,"featured_media":781170,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[194292],"tags":[49,48,276534,69717,276536,2338,12237,276537,67946,276535,161427],"class_list":["post-781169","post","type-post","status-publish","format-standard","has-post-thumbnail","category-montreal","tag-ca","tag-canada","tag-claudiu-popa","tag-high-school-students","tag-information-systems","tag-montreal","tag-personal-information","tag-rosemere-high-school","tag-school-board","tag-social-insurance-numbers","tag-the-information"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/posts\/781169","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/comments?post=781169"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/posts\/781169\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/media\/781170"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/media?parent=781169"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/categories?post=781169"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/tags?post=781169"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}