It has been more than three weeks since the Rainbow District School Board (RDSB) experienced a cyber incident which disrupted its operations. The board confirmed the he restoration of all critical systems in a statement issued Friday, marking another significant milestone in its response to the breach. CTV News has prepared a timeline of events as the incident unfolded. An unknown technical issues The incident began on Feb. 7, when technical issues with the board’s computer system prompted immediate action. Information services staff initiated a system-wide shutdown of all network services by 10 a.m. that day as a precautionary measure with a message was sent to staff, students, parents, guardians and the media, advising them of the situation and directing them to the board’s externally hosted website, www.rainbowschools.ca, for updates. A cyber incident confirmed By mid-afternoon that Friday, the board confirmed it was responding to a cyber incident and retained cybersecurity experts to investigate the cause. No school closures or classes cancelled Phone lines were restored by Feb. 10, allowing schools to remain open and classes to continue. Basic network services restored Internet access for staff was reinstated on Feb. 12, followed by student access on Feb. 14. Week of February 17-21, 2025 The restoration of applications used for teaching and learning was prioritized, particularly for students relying on assistive technology. Operational applications were also gradually brought back online, with the board regularly praising the diligence of its information services team. Personal information compromised On Feb. 20, the board notified current and former employees, students, parents and guardians that personal information had been accessed during the breach. The incident was reported to the Office of the Information and Privacy Commissioner of Ontario and affected individuals were offered credit monitoring services where applicable. Personal data not sold or shared “Rainbow District School Board has since received confirmation that the data acquired by the unauthorized individuals was deleted and has not been shared,” the board said in its update on Feb. 28. Nicole Charette, senior advisor for corporate communications and strategic planning with RDSB, emphasized the board’s commitment to transparency and support for those affected in an email to the media on Friday. “We would like to extend our gratitude to staff in information services who worked well beyond the regular day and week to restore services as quickly as possible,” said board officials. The board also thanked former employees and graduates who provided updated contact information to ensure timely communication. Investigation concluding As the investigation concludes, the board said it will continue to work with cybersecurity experts to monitor and strengthen its network security. In its update Friday, RDSB expressed its appreciation for the patience and understanding of staff, students, parents, guardians and the community throughout the incident. Still have questions? Outstanding inquiries can be directed to cyberincident@rainbowschools.ca.
