Rainbow District School Board Reports Data Breach Affecting Employees and Students The Rainbow District School Board, serving schools in Sudbury, Espanola, and Manitoulin Island, disclosed a cyber incident on February 7 that likely compromised sensitive personal and financial data. While no confirmed cases of fraud have been reported, the breach exposed information for current and former employees, students, and voters. Impacted Groups and Compromised Data: - Former employees (2005–2009, not rehired after 2010): Social Insurance Numbers (SINs). - Current/former employees (2002): Bank account numbers, employee IDs, addresses, and annual salaries. - Benefits enrollees (2009, 2016): Beneficiary names and phone numbers. - Employees with criminal record checks (2012–2019): Same as above. - Students (1966–2024): Dates of birth, Ontario Education Numbers, and grades. - 2022 municipal election voters (Greater Sudbury): Dates of birth and addresses. The board engaged a third-party expert to investigate the breach, concluding its assessment nine months later. The incident was reported to Ontario’s Information and Privacy Commissioner, with the board emphasizing its commitment to transparency and accountability. Affected individuals include full-time, part-time, and occasional staff.