Gothamist

A non-profit newsroom, powered by WNYC.

Gothamist

WNYC Listen Live

Donate

 

 

News

Another data breach at NYC schools exposes student and staff information


By

Jessica Gould

Published Jun 24, 2023

Modified Jun 24, 2023


Share

FacebookTwitterRedditEmail


Never miss a story

 Email address

By submitting your information, you're agreeing to receive communications from New York Public Radio in accordance with our Terms .

52 Chambers Street, the DOE headquarters in the Old Tweed Courthouse.

 

JB Nicholas / Gothamist


By

Jessica Gould

Published Jun 24, 2023

Modified Jun 24, 2023


Share

FacebookTwitterRedditEmail


We rely on your support to make local news available to all

Make your contribution now and help Gothamist thrive in 2026. Donate today

Gothamist is funded by sponsors and member donations

The New York City Department of Education estimates that the personal data of some 45,000 students was compromised as part of a breach involving the file transfer software MOVEit.

Officials said the compromised data includes social security numbers, birth dates and certain student evaluations, though the specific types of data breached varies per student. Employees’ information was also affected, officials said, but they did not identify how many staff members were involved. No education department data has been published as a result of the breach so far, officials said, and the department will begin notifying those affected this summer.

Multiple federal agencies and many companies were also affected by the breach, which is being attributed to Russian cybercriminals.

"The safety and security of our students and staff, including their personal information and data, is of the utmost importance for the New York City Department of Education,” said department spokesperson Nathaniel Styer. “Currently we have no reason to believe there is ongoing unauthorized access to DOE systems."

It is the latest in a series of security breaches that have affected New York City public school students. Last spring, the data of some 820,000 students was compromised in a hack of a grading and attendance system from Illuminate Education. In 2021, there was a leak of data through Google Drive affecting about 3,000 students and 100 staff members.

Leonie Haimson, co-chair of the Parent Coalition for Student Privacy and a longtime advocate for stronger data security, said the latest breach should serve as a wake up call to the department.

“They’ve just shown a level of unseriousness about this,” she said. “It really behooves them, at this point, to clean up their act.”

Haimson said the city must ensure all vendors follow encryption protocols, as required by state data privacy law, and delete data as soon as possible: “They need to be straightforward and on top of it and they’re not.”

A report from the Special Commissioner of Investigation in 2021 said education department leadership had also identified data security as a top concern, stating “most significant corruption hazards [were] in the following areas: (1) the procurement, distribution and safeguarding of air purifiers and (2) data security.”

In a note to reporters revealing the breach on Friday evening, education department officials emphasized that they mobilized quickly, patching the software within hours of discovering the problem, and partnering with the NYPD and the FBI on their investigations.

This story has been updated to correct the name of the Parent Coalition for Student Privacy.

Tagged

new york city

education

data breach


Jessica Gould

Twitter

Jessica is the education reporter for WNYC and Gothamist. During the Covid-19 pandemic, Jessica reported on the shutdown and reopening of the nation’s largest school system, highlighting the unprecedented impacts on learning, health and mental health for students, staff and families. Got a tip? Email [email protected]

Read more

Gothamist is funded by sponsors and member donations


Gothamist is funded by sponsors and member donations


MORE news

Federal judge tosses Trump administration lawsuit challenging NYC sanctuary laws

A Brooklyn judge ruled the federal government lacked standing to challenge city policies limiting cooperation with immigration authorities.

By

Phil Corso

Published Oct 15, 2026 at 9:13 p.m. ET


2 men charged in fatal fentanyl poisoning of NYC college student, alleged rape

Federal prosecutors say one man gave two women fentanyl disguised as cocaine in a Manhattan dorm, then raped one of them while she was unconscious. She later died.

By

Giulia Heyward

News

2 men charged in fatal fentanyl poisoning of NYC college student, alleged rape

Federal prosecutors say one man gave two women fentanyl disguised as cocaine in a Manhattan dorm, then raped one of them while she was unconscious. She later died.

By

Giulia Heyward


NYC spending on homelessness has soared. So has the number of people on the street.

By

Karen Yi

MTA’s Lieber reiterates opposition to ‘fast and free’ buses after violent incident

By

Carol Chen

Avila Chevalier insists her beef is with NYPD Commissioner Tisch, not Mamdani

By

Jimmy Vielkind


Never miss a story

Catch up on the most important headlines with a roundup of essential NYC stories, delivered to your inbox daily.

Sign upEmail address

By submitting your information, you're agreeing to receive communications from New York Public Radio in accordance with our Terms .