Many high schools in Taichung had outsourced school management systems hacked. Schools urgently investigate: results have not been tampered with

Many schools in Taichung City have outsourced school management systems that are suspected to have been hacked, and the basic information of students, parents and teachers may be leaked. After receiving notifications from system vendors, many schools have initially checked that student scores and student status information have not been tampered with. Advancement and study Rights and interests are not affected; schools have also urgently issued open letters to parents and students explaining that the manufacturer has now called the police. Before investigation and confirmation, parents and students are asked to pay attention to unknown calls and messages claiming to be schools, teachers or manufacturers, and do not click on suspicious links or make money transfers.

Taichung City Councilor Chen Shuhua pointed out that many parents have reported that they are worried that the personal information of students and parents has been leaked. The security incident may have occurred for a week. At present, the relevant units of the Taichung City Government Education Bureau have no corresponding measures to deal with it. They require that the personal information protection mechanism of students and parents should be immediately activated to assist schools in seeking compensation from information companies. Manufacturers should bear corresponding legal responsibilities.

Recently, many schools in Taichung City have received notices from an off-campus cloud school management system company responsible for maintenance and operation. The company was suspected of being invaded by an unauthorized third party on the 5th, causing the risk of leakage of basic information such as the names and contact information of students, parents and staff in the system. The manufacturer has blocked the intrusion channel, hired a third-party security team to conduct digital forensics, and reported the case to the police to assist in the investigation.

High schools including Xiyuan, Wenhua, Zhongming, and Huiwen made emergency announcements to explain the incident to students and parents. In particular, the relevant systems are related to student grades, absenteeism records, etc. Each school pointed out that after preliminary inspections by the manufacturer, the current student grades and student status information have not been tampered with, and the rights to further studies and study are not affected.

According to the school, the system manufacturer has a high market share. Many school systems across the country have been entrusted to the company. Each school has also completed notifications to the education authorities in compliance with regulations and strictly requires the manufacturers to take full responsibility.

Before the relevant incidents are investigated and confirmed, considering that the basic information of students, parents, and staff in the system may be leaked, schools also remind parents of students to pay attention to unknown calls and messages claiming to be schools, teachers, or vendors in recent days, and not to click on suspicious links or make money transfers.

Chen Shuhua pointed out that every time a similar school system hacking incident occurred in Taichung City, the Education Bureau lacked a unified handling process and allowed schools to set up their own firewalls. She asked the Education Bureau to assist the school in seeking compensation from the information company, and the company should bear the corresponding legal responsibility.