Some students in the San Diego Unified School District may have had their contact information and even social security numbers compromised in a data breach that appeared to be impacting schools nationwide, the district said Friday.
San Diego's largest school district learned of the cybersecurity incident on Tuesday and alerted families that night. In an email, the district said PowerSchool — its information system provider — was the target of an attack, discovered on Dec. 28, in which an unauthorized user downloaded some SDUSD student data. It was unclear at the time what type of data was accessed.
Relevant content:
According to the district, PowerSchool later said the compromised data included mainly contact information like names, addresses and phone numbers. Social security numbers, non-detailed medical condition information and other personal details of some students could have also been accessed, the district added.
Get top local stories in San Diego delivered to you every morning. Sign up for NBC San Diego's News Headlines newsletter.
"PowerSchool is working with urgency to complete their investigation and determine whether [personally identifiable information] belonging to our students was included," W. Drew Rowlands, San Diego Unified's deputy superintendent of operations, wrote in part of Friday's email update to families.
Rowlands said PowerSchool would offer support such as credit monitoring or identity protection services to the families of students impacted by the release of sensitive information.