Notice of Data Breach
Dear Lassen Union High School District Parent/Guardian:
I am writing to notify you of a data breach incident that has occurred within the Lassen Union High School District (“District”).
On May 6, 2020, the District received a report from one of its vendors that student information had been accessed and removed from the District’s Student Information System (“SIS”) by unauthorized persons through a security flaw in the vendor’s software. The District believes student information was accessible in this manner dating back to November 4, 2019, however, at this time, there is no evidence to suggest that student data has been misused in any manner. The District is still investigating this incident and will provide more information as it becomes available.
What Information Was Involved?
The District’s SIS contains the following information which was involved in the incident:
- Student ﬁrst and last name, mailing address, home address, and identification number;
- Student email address and encrypted email password.
The SIS does NOT contain student social security numbers or financial information and this information was not involved in or affected by the incident.
What We Are Doing?
Immediately upon learning of this breach of student data, the District took steps to terminate the unauthorized access, secure the SIS, and identify the scope of the incident with the help of the District’s vendor. The District has implemented and continues to explore implementation of additional security measures to prevent this from happening again. The District has also notified law enforcement officials of this incident and will provide more information on any investigation as it becomes available and as permitted. Consistent with state law, due to the number of students potentially affected by this incident, the District will provide notice of this incident to state authorities as well.
To better ensure the protection of student data in the SIS, the District will also be changing all passwords for our student and parent portal account. If you experience difficulty in accessing your account, please call Lassen High School at (530) 257-2141 or the Lassen Union High School District office at (530) 257-5134.
What You Can Do?
While there is no evidence to suggest that any data involved in this incident has been misused, out of an abundance of caution, the District recommends that impacted individuals regularly review their account statements and credit reports so they may be alerted to any incidents of fraud or identity theft. In addition, you may wish to report suspected identity theft to local law enforcement, the Federal Trade Commission (“FTC”), or the state attorney general. To learn more, you can visit the FTC’s web site, www.consumer.gov/idtheft; or call the FTC at (877) IDTHEFT (438-4338) or (202) 326-2222; or write to: Federal Trade Commission, 600 Pennsylvania Avenue, NW, Washington, DC 20580.
Credit Bureau Information:
Equifax P.O. BOX 740241 ATLANTA, GA 30374 1-866-349-5191 equifax.com
Experian P.O. BOX 9532 ALLEN, TX 75013 1-888-397-3742 experian.com
TransUnion P.O. BOX 2000 CHESTER, PA 19022 1-800-680-7289 transunion.com
For More Information
Again, we sincerely regret that this incident has occurred. Our office will be providing further information as details become available. In the meantime, if you have any questions, please contact us at (530) 257-5134, or go to http://www.lassenhigh.org/datasafety
LUHSD Network Administrator