Contact and social insurance details belonging to some students, employees’ bank account numbers and images of cheques were among the data exposed in a hack against a Winnipeg school division. Pembina Trails School Division announced some of the findings of its investigation into a December 2024 cybersecurity breach that led to student and staff information being published on the dark web. The division said personal information belonging to some students who were enrolled at 12 schools between 1999 and 2024 was exposed. South Pointe School in the Pembina Trails School Division is one of those affected by a December 2024 cybersecurity breach. (John Woods / Free Press files) The schools are: Acadia, Bairdmore, Crane, Fort Richmond, Oakenwald, Pembina Trails Collegiate, Ralph Maybank, St. Avila, Shaftesbury, South Point, Vincent Massey and Viscount. Details include students’ names, dates of birth, social insurance numbers, passport numbers, health card numbers, personal health details and disciplinary or behavioural information. Teachers and other staff who were employed between 2001 and 2024 division-wide were also affected. Names, dates of birth, contact information, provincial health numbers and bank account numbers were breached. Some social insurance numbers, personal health information and details of disciplinary action were accessed. Hackers posted images of passport photo pages belonging to two teachers when they tried to sell the stolen data on the dark web last