Las Vegas Sun

April 19, 2024

Employee data possibly exposed in School District ransomware attack

School District

Justin M. Bowen / File photo

The Clark County School District administration building in Las Vegas.

Clark County School District employees may have had their personal information, including Social Security numbers, exposed during a ransomware attack, the district said today.

The incident may have affected individuals including current and former employees, officials said.

The district was notifying people whose names and Social Security numbers were stored in the affected computer systems.

“The confidentiality, privacy, and security of information in CCSD’s care is one of its highest priorities and CCSD takes this incident very seriously,” a notice to employees said.

It is unknown whether any files containing sensitive information were accessed or acquired in the attack, officials said.

The district has not received any reports of misuse or attempted misuse of any information, officials said.

Certain computer systems were infected on Aug. 27 with a virus that prohibited access to some files, officials said.

The district notified law enforcement and worked with third-party forensic investigators to determine the scope of the incident.

“It was determined that CCSD was the victim of a criminal ransomware attack and is working to restore all systems to secure, full functionality,” the notice states.

Such attacks typically threaten to expose sensitive information or continue to block access to data unless a ransom is paid.

The district is implementing additional safeguards and notifying state and federal regulators, as required.

The district advised those potentially impacted to review their personal financial accounts and monitor credit reports for suspicious activity.