{
	"id": "613fce5f-3e79-4f61-a870-e18d6685b691",
	"created_at": "2026-04-06T00:18:38.883356Z",
	"updated_at": "2026-04-10T03:21:56.138228Z",
	"deleted_at": null,
	"sha1_hash": "7bf8a124f0815df18e42045cb347df5ea1b4c3d2",
	"title": "Toronto school board confirms students’ info stolen as LockBit claims breach",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 34157,
	"plain_text": "Toronto school board confirms students’ info stolen as LockBit\r\nclaims breach\r\nBy Jonathan Greig\r\nPublished: 2024-08-30 · Archived: 2026-04-05 19:59:15 UTC\r\nThe Toronto District School Board (TDSB) confirmed this week that the information of students was involved in a\r\nransomware attack discovered in June. \r\nTDSB initially said the cybercriminals targeted a technology testing environment that is separate from the board’s\r\nofficial networks. The school board is the largest and most diverse in Canada and manages 582 schools for about\r\n235,000 students.\r\nIn an update on Thursday, TDSB confirmed that an unstated number of students from the 2023/2024 school year\r\ndid have information in the test environment. That information includes a student's name, school name, grade,\r\nschool email address, student number and date of birth. \r\nTDSB claimed its cybersecurity team and external experts told them that the risk to students “is low and that they\r\nhave not seen any public disclosure of student data as part of their investigations, which includes monitoring of\r\nthe dark web and other online locations.”\r\nBut on Thursday evening, the LockBit ransomware gang took credit for the attack. The leak site post does not say\r\nhow much data was taken but gives TDSB 13 days to pay an undisclosed ransom.\r\nTDSB did not respond to requests for comment about the LockBit posting. \r\nThe school board defended its response to the attack in a letter to parents this week, arguing that it took a range of\r\nsteps to improve their security while also coordinating with law enforcement on an investigation. \r\nTDSB said it was advised by the Office of the Information and Privacy Commissioner of Ontario to make the\r\nannouncement about the data leakage so that people can file complaints with the office. \r\nLockBit’s claim of attacking TDSB comes as the ransomware gang attempts to revive itself yet again following a\r\nlaw enforcement takedown in February. \r\nThe group posted dozens of victims on Thursday  alongside TDSB — with experts noting that many of the posts\r\nare either full of erroneous information or involve victims that do not exist. Some of the victims are from past\r\nattacks or from attacks claimed by other groups. \r\nTwo Russian nationals pleaded guilty in July to being members of LockBit and using its ransomware to extort\r\nmoney from victims around the world.\r\nhttps://therecord.media/toronto-school-district-board-ransomware\r\nPage 1 of 2\n\nSource: https://therecord.media/toronto-school-district-board-ransomware\r\nhttps://therecord.media/toronto-school-district-board-ransomware\r\nPage 2 of 2",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"ETDA"
	],
	"references": [
		"https://therecord.media/toronto-school-district-board-ransomware"
	],
	"report_names": [
		"toronto-school-district-board-ransomware"
	],
	"threat_actors": [],
	"ts_created_at": 1775434718,
	"ts_updated_at": 1775791316,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/7bf8a124f0815df18e42045cb347df5ea1b4c3d2.pdf",
		"text": "https://archive.orkl.eu/7bf8a124f0815df18e42045cb347df5ea1b4c3d2.txt",
		"img": "https://archive.orkl.eu/7bf8a124f0815df18e42045cb347df5ea1b4c3d2.jpg"
	}
}