Cybersecurity probe ends at Pembina Trails; affected groups identified

An investigation into a cyber security incident at Pembina Trails School Division has wrapped up, shedding light on potentially leaked information.

A school division in Winnipeg has wrapped up an investigation into a cyber security breach it experienced last year—identifying the groups that were likely impacted.

In December 2024, Pembina Trails School Division said it experienced a cyber security incident resulting in unauthorized access to its systems. Following months of engagement with third-party cyber security professionals, it said student data from a dozen schools may have been leaked.

Hackers may have obtained data on students enrolled in 1999 and 2024, including their name, birthdate, contact information, SIN, passport number and health card number.

Individuals who also wrote cheques to the division from 2021 to 2024 may have had their name, contact information, and chequing account number leaked, according to an update posted to its website on Wednesday.

The division, which operates 36 schools in south Winnipeg, said employees were likely impacted by the breach as well. The name, birthdate, contact information, provincial health number, and financial account number of staff members between 2001 and 2024 may have been leaked.

Pembina Trails School Division said since the incident, it has been working with a security vendor to enhance security measures and to provide 24/7 monitoring to its systems.

The division does not expect to provide further updates on the cybersecurity incident, it said.

A full list of the groups impacted by the data breach can be found online.