WRDSB cyber attack now under investigation by Waterloo Regional Police

Back in August, the Waterloo Region District School Board revealed it had been hacked over the summer, with attackers stealing sensitive data including SIN numbers, birth-dates and banking information. Employees from as far back as 1970 had personal information stolen.

The board has since said that information has been recovered but, they haven't said how nor have they explained the full extent of the initial hack. 

Now more than three months since the public became aware of the cyber security attack, Waterloo Regional Police have confirmed they are investigating. 

Regional Police have only said they “recently” received an official report of the incident from the school board.

CityNews 570 reached out to the board for comment who said back in July when the hack initially occurred they reported the incident to the OPP's Cyber Unit.

The board said a 'standard process recommended by cyber experts was followed and additional information was reported to law enforcement both provincial and local.' 

The school board also said they informed the Information and Privacy Commissioner of Ontario.

Richard Clausi, the president of Active Retired Members of OSSTF chapter 24, said he's been hearing from retired teachers who remain frustrated with the lack of information and communication from the board. 

Clausi said, at least three former school board employees have reported identity theft attempts since the hack in July. 

He said, he is currently advising members to report any identity theft attempts to Waterloo Regional Police. 

“Step number one is to report it to the police, get an incident number and then get a copy of the report and if they feel comfortable please send me a copy so we can look for patterns.”

Clausi said, the goal is to create a cluster of reports from WRDSB retirees to then build an image of what is happening. 

He explained the superintendent of human resources at the WRDSB had reached out to him and other retirees for these incident reports but, the lack of information has made him hesitant to do so. 

“I'm unwilling to say or do anything unless I have a piece of paper in my hand, an incident report. It's not my place to pass these on to the board.” 

Clausi had spoken previously in an interview with The Record discussing the incident reports and their collection, in which he claims the school board was unhappy with his discussions with the media. 

“The superintendent was a little concerned that we had talked to The Record and they claim that the information that we have is critical to their risk assessment.” 

He claims comments he made during the interview were brought up by the school board in a message exchange between him and the superintendent, and used as the reason for refusing his request for further discussion. 

“We're still delighted to meet with them but, they assure us in this note that they will not meet with us unless we commit to a productive and respectful engagement.” 

Clausi said, the lack of information from the board has remained a point of frustration. 

“Retirees  – even as of this point – right now – today, have not heard anything from the board. They have not been informed, they have absolutely no idea who they should talk to.”