Granite School District reports cybersecurity incident; employee data compromised

Granite School District in Utah confirmed on Tuesday that it had recently experienced a cybersecurity breach compromising its employees’ personally identifiable information (PII). The district notified staff and patrons about the incident on October 18 and followed up with additional communications on November 20 and 22.

The district acknowledged the breach in its statement but noted that the full scope of the compromised data is still under investigation. “We are just beginning to learn what types of personally identifiable information were compromised,” the district said.

Employees have been urged to take immediate precautions, including contacting financial institutions and placing fraud alerts or credit freezes on their accounts. The district also promised to provide further updates and resources once all affected individuals have been identified.

The district’s IT team is working with the Utah State Board of Education, the Utah Cyber Security Center, an external forensic cybersecurity team, and the FBI to address the breach and assess its impact.

Granite School District expressed regret for the distress caused, particularly as the breach occurred during the holiday season. “We regret the actions of the threat actors and the extra burden this has placed on families,” the district stated.