[ad_1]
The security breach occurred at one of the county’s municipal providers, the Conexus company, from March 23 to May 5.
– This is serious and very unfortunate. Personal data must be stored securely with the county council. Although the security breach occurred at a provider, the county council has overall responsibility, says county councilor Odd Inge Mjøen at the Trøndelag county council in a press release.
Thousands may be affected
He doesn’t want to go into what kind of information is being diverted right now.
NRK finds out that they are talking about student names, birth numbers, sex, email and evaluations.
– We don’t know how much has been downloaded. It is unfortunate, says Mjøen.
The IT system has information about students, teachers, and some county administration employees. Taken together, the cloud solution contains personal data from more than 40,000 people from Trøndelag, Agder and Inland, the county council said in a press release.
– The Data Inspectorate is informed of the incident, and we are now in dialogue with the police to report a possible illegal acquisition of data, says Mjøen.
CONCERNED: County Councilman Odd Inge Mjøen on the Trøndelag County Council says all affected schools must be on guard.
Photo: Stein Roar Leite
Those affected are informed
County authorities declare that all affected students and staff are informed in writing of what happened.
“We ask all concerned to be on guard and to report to the police on suspicion of misuse of personal data,” says Mjøen.
All Trøndelag County schools are affected, probably with the exception of three schools. The danger of spreading information to many students and staff worries Mjøen.
– The potential is great. Therefore, we have chosen to issue a warning to all students and staff in the affected schools.
– Very serious
Chief of Experts at the Inland County Council, Tore Gregersen, is very concerned after the news.
This is very serious. I have never experienced anything like this, he says.
Inside, 23 high schools can be affected in the worst case scenario.
It confirms NRK’s experience that the personal information that has been possible to be removed is the name, address, date of birth and the municipality of origin. By putting this together, they can access student grades.
It is not possible to download health information.
The police have also been contacted and are now working with Conexus on the matter. A third company is reviewing to make sure that a new system can be used to store personal data.
SERIOUSLY: Tore Gregersen in Inland County says she has never experienced anything like this.
Photo: Frode Meskau / NRK
