Breaches and incidents
Canton of Vaud (DGEP): IT support platform for gymnases and vocational schools breached, 38,000 students and 3,500 teachers
The Vaud state said its Direction generale de l’enseignement postobligatoire detected unauthorized access on 26 Oct to the IT support platform used by...
- Disclosed
- Verification
- Checked against a primary source
What happened
- The Vaud state said its Direction generale de l’enseignement postobligatoire detected unauthorized access on 26 Oct to the IT support platform used by cantonal gymnases and vocational schools; names, first names and school email addresses of about 38,000 students and 3,500 teachers, plus the content of support requests, were copied.
- Root cause: not disclosed (the release says investigations are ongoing; the platform vendor is not named). Per the canton, passwords are not stored on the platform and no grades or student files are concerned.
- No attacker named; the release refers only to “une personne non autorisee”.
- The platform was disconnected from the internet and secured with the cantonal security operations centre; users were informed directly and warned about phishing, the federal cybersecurity office and the data protection authority were informed, and a criminal complaint is to be filed.