By Andrew Wroblewski
An “unauthorized person” accessed Commack High School students’ information in a network breach Thursday, school district officials said.
The hacker accessed the high school’s student management system and may have viewed information that includes student identification numbers, names, addresses, contact information and school schedules, officials said in a statement posted to the district’s website.
“We thought it was important to make parents aware of the potential release of student data. At this time, we believe this breach only applies to a very limited number of high school student records,” the statement said.
Officials added that student social security numbers are not contained in the student management system.
Upon learning of the breach, the district’s information technology department immediately added additional security protocols, implemented a continuous monitoring program for all systems and restored schedules that were altered during the breach, officials said.
“Our 24 hour monitoring has shown no additional unauthorized attempts to access our student management systems at this time,” the statement said.
As of Friday afternoon, it appears no information was downloaded or disseminated, officials added.
The district is working with Suffolk County Police Department to identify the hacker. Police said Friday that the investigation is ongoing.
Commack is also conducting an internal security review and is in the process of hiring an outside technology company to conduct a review of the district’s student management system and networks.
“Please be assured that the district takes very seriously the protection of private student data, and actively monitors our networks,” the statement said. “We continue to work to ensure that the district takes the steps necessary to prevent this type of incident in the future.”