Globalnews.Ca Burnaby School Cyberattack Exposes Personal Data of Students and Staff
Article Content
- •Ransomware attack on Burnaby School District exposed personal data of students and staff.
- •Stolen information includes names, birthdates, and sensitive educational records.
- •Affected individuals are offered fraud alert services to mitigate risks.
A ransomware attack on the Burnaby School District on September 21, 2026, resulted in the theft of personal information belonging to students, parents, and staff. The district confirmed that unauthorized access led to the copying of files containing names, birthdates, grades, and school names. Additionally, sensitive documents such as residency confirmation and kindergarten assessment notes were potentially compromised. The district has reported the incident to the Burnaby RCMP and the Office of the Information and Privacy Commissioner for B.C. In response, they offered affected individuals registration with TransUnion’s Fraud Alert Database to monitor for potential fraud. The district maintains that the impact on the community is limited, though it urges vigilance against suspicious communications. Investigations are ongoing to assess the full scope of the breach.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track Burnaby School District in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What personal information was compromised?
What steps are being taken to address the breach?
How can affected individuals protect themselves?
Continue Reading
CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…
CISA Warns of Exploited Vulnerabilities in ProFTPD, ONLYOFFICE, Strapi, and More The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added five vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including critical flaws in ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND. These vulnerabilities are being by Chinese actors for cyber espionage, targeting…