Information and Privacy Commissioner (IPC) of Ontario Releases Final Report
The Information and Privacy Commissioner (IPC) of Ontario has issued its final report in response to a cyber attack against PowerSchool, the Rainy River District School Board’s third-party student information system provider.
We respect the IPC’s conclusions and commit to following all recommendations.
The IPC concluded that, while the Rainy River District School Board’s notification efforts following the incident were appropriate, there is work to be done on our end to strengthen our vendor evaluation processes.
Since the incident, PowerSchool has committed to appropriately strengthening its security measures, and we will continue to monitor their compliance. Further, the IPC has encouraged all school boards to work together to ensure that common vendors are secure, and we look forward to working with our colleagues across the province to achieve this goal.
Incident Background
On Tuesday, January 7, 2025, PowerSchool notified us about a data breach that occurred between December 22 and 28, 2024. PowerSchool quickly secured the affected data and began an investigation. Our IT department, with PowerSchool's support, is also addressing the situation employing our cyber-security protocols.
This webpage will serve as the key information source for RRDSB staff, students, and the community members we serve. It will be updated on a regular basis with new information as it is released. The site will include Communication and Notification Letters from the RRDSB, Frequently Asked Questions (FAQs), and any other emerging relevant details regarding this matter.
If you have a question not currently addressed in the below FAQs or the Communication and Notification Letters, please email cyberin[email protected].