The school administration systems of many high schools in Taichung were hacked and personal information may have been leaked. The Education Bureau responded

It has been reported that many schools in Taichung City have outsourced school management systems and are suspected of being hacked by hackers. The basic information of students, parents and teachers in the system may be leaked. After receiving notifications from the system vendors, many schools have initially checked that the student scores and student status information have not been tampered with, and the rights to further studies and study have not been affected. The Taichung City Education Bureau pointed out that it has urged schools and system manufacturers to activate the information security response mechanism as soon as possible. Each school system is contracted and purchased by each school and the manufacturer. If a school confirms that the manufacturer has breached the contract after the information security appraisal, it can seek compensation from the manufacturer according to the contract to protect the rights and interests of students.

City Councilor Chen Shuhua pointed out that many parents have reported that the school affairs systems of many schools were suspected of being hacked, and they are worried that the personal information of students and parents has been leaked. This information security incident may have occurred for a week, and the relevant units of the Taichung City Education Bureau have no corresponding measures to deal with it. They requested that the personal information protection mechanism of students and parents should be immediately activated, and the school should be assisted in seeking compensation from the information company. The company should bear the corresponding legal responsibility.

Many schools in Taichung City have received notices from an off-campus cloud school management system company responsible for maintenance. The company is suspected of being invaded by an unauthorized third party, which may expose the names, contact information and other basic information of students, parents and staff in the system. The manufacturer has blocked the intrusion channel, hired a third-party security team to conduct digital forensics, and reported the case to the police to assist in the investigation. Affected schools have made emergency announcements to explain the incident to students and parents. In particular, the relevant systems are related to student grades, absenteeism records, etc. Each school pointed out that after preliminary inspection by the manufacturer, the current student scores and student status information have not been tampered with, and the rights to further education and study have not been affected. Each school has also completed the notification to the education authorities in accordance with regulations, and strictly requires the manufacturer to take full responsibility.

The Education Bureau pointed out that in response to the intrusion of some high school administrative systems by unauthorized third parties, schools and system manufacturers have been urged to immediately activate the information security response mechanism, and the system manufacturers will block the intrusion channels and carry out subsequent repairs. As of now, the system manufacturers have not discovered that student grades, student status and other information have been modified. The system manufacturers have asked the information security company for identification, which is currently being accelerated. If any school confirms that the manufacturer has breached the contract after the information security identification, it can seek compensation from the manufacturer according to the contract to protect the rights and interests of students.