Notice of Data Privacy Incident
JCPS recently determined an employee with greater access privileges to the network due to the requirements of their position, transferred district files containing student information into their personal Gmail account. This action was a violation of district policy relating to the unauthorized transfer of student information. As such, the employee’s ability to connect to the JCPS network was terminated and the employee was placed on administrative leave. JCPS, with the support of computer forensics investigators, immediately launched an investigation to determine the nature and scope of the event. As part of the ongoing investigation, the employee was asked to return the files to JCPS. To date, the files copied without authorization have not been returned.
What Information was Involved?
The information transferred without authorization included a combination of one or more of the following: name, address, student education record information, medical information, and Missouri Student Identification System number.
What is JCPS Doing?
JCPS takes the confidentiality, privacy, and security of information collected by and entrusted to us as one of our highest priorities. Upon learning of this event, JCPS immediately took steps to assess the security of our systems and conduct a thorough investigation, which is ongoing. JCPS notified the Missouri Department of Elementary and Secondary Education, Missouri Attorney General’s Office, and the Missouri State Auditor’s Office, as is required. Additionally, JCPS reported this incident to law enforcement. We are reviewing our security policies and procedures and reassessing technical, administrative, and physical safeguards to identify and implement further security enhancements, as needed, in addition to security measures already in place. JCPS is also conducting additional employee training on data privacy and security.
Beginning May 29, 2019, JCPS is mailing letters to impacted individuals for whom it has address information. Individuals may also call 866-775-4209, Monday through Friday 8:00 a.m. to 5:30 p.m. Central Time, to confirm if they are impacted by this event and if so, the types of information relating to him/her contained in the documents transferred without authorization.
For More Information
JCPS has set up a dedicated call center to answer questions about this event. The call center can be reached at 866-775-4209, Monday through Friday 8:00 a.m. to 5:30 p.m., Central Time.
What Impacted Individuals Can Do
While JCPS has no evidence of identity theft related to this incident, JCPS encourages impacted individuals to remain vigilant against incidents of identity theft and fraud by reviewing their accounts, explanations of benefits, and credit reports for suspicious activity, and to report any suspicious activity to the affiliated institutions immediately.