Incident

Pueblo County school district 70 reports ransomware attack, data breach


Learn More

Pueblo County School District 70 (Pueblo D70) is reporting a significant data breach and ransomware attack that may have compromised the personal information of former students, as well as current and former staff members.

On April 27, 2023, Pueblo D70 was notified by the cybersecurity company Sophos of a ransomware attack on the district’s network. Subsequently, on May 15, 2023, the authorities confirmed that a data breach had indeed occurred. This prompted a coordinated effort involving IT technicians and agents from Pueblo School District 60, Colorado State University Pueblo, the CIA (?) and the FBI to identify the extent of the data leak.

The breach is believed to have compromised personal information stored in student records from 1991 to 2006, as well as various records of past and present staff members. The specific data that may have been exposed includes:

  • Names
  • Phone numbers
  • Dates of birth
  • Other personal information related to affected individuals

The number of affected individuals is not disclosed.

Pueblo D70 Superintendent Ronda Rein explained the delay in publicizing the breach. The involvement of the CIA in the investigation necessitated a period of confidentiality. It's completely unclear why would the CIA be involved in cybersecurity breach of a school district.

Pueblo County school district 70 reports ransomware attack, data breach