Dear Families,
We appreciate your continued support, understanding, and patience while we have been responding to a cyber incident. While services have been restored in all schools for the past few weeks, we have continued to work diligently with cyber experts to better understand what occurred.
Unfortunately, we can now confirm that the perpetrators of this cyber incident stole personal information about members of the LDSB community, including current and former staff members, some students, and some of their parents or guardians. We understand this news may be concerning, and we are deeply sorry.
We believe the risk of publication and misuse of the exposed information to be low. Unfortunately, cyber incidents are occurring on a frequent basis, and impacting many individuals, public institutions, and private companies.
Most current students and families receiving this notice are likely affected, though to varying degrees. To better understand how you may be affected, categorized by school, please visit the following LDSB website hyperlink: limestone.on.ca/cyber-incident-update.
Once there, select “Cyber Incident Update for Students and Families – May 15, 2025,” and choose from the “All Schools” and the school-specific drop-down list. Please note that there is also a Frequently Asked Questions section at the bottom of the page.
How can I protect myself?
As indicated, we believe the risk of publication and misuse of the exposed information to be low. Nonetheless, all of us should always be vigilant in identifying phishing attempts and other suspicious communications, and families should practice good cyber hygiene by limiting the amount of personal information they share online and by using strong and unique passwords for all online services. Sadly, cyber incidents are occurring on a frequent basis, and impacting many individuals, public institutions, and private companies.
What is next?
We are aware that this incident has affected our community in a direct way. We are deeply sorry for this. Please know that we are committed to strengthening our cybersecurity to better protect against future incidents.
As indicated several weeks ago, we have reported the incident to the Kingston Police. Additionally, we have notified the Information and Privacy Commissioner of Ontario (IPC). You have the right to file a complaint with the IPC, although you are not required to do so as we have already voluntarily reported to the incident to the Information and Privacy Commissioner of Ontario.
Additional Questions
If you have any questions, please feel free to contact Limestone District School Board by e-mail at cyberincident2025@limestone.on.ca.
Sincerely,
Krishna Burra
Director of Education