The key point: The State of Vaud reports the theft of data belonging to 41,500 students and teachers at upper-secondary and vocational schools, in a cyberattack detected on 26 October.
The nature of the intrusion
- Target : the IT support request platform for post-compulsory education.
- Stolen data : surnames, first names, school e-mail addresses and the content of requests.
- Data spared : passwords and sensitive school data, such as grades.
The authorities' response
- Immediate disconnection of the platform and deployment of the cantonal Security Operations Centre.
- Notification to the Federal Office for Cybersecurity and the Data Protection Authority.
- Criminal complaint announced; investigations are continuing.
- Prevention : users are urged to beware of phishing.
Key figures
- 41 500 : users whose data were copied.
- 26 October : date the unauthorised access was detected.
In short
A cyberattack hit the IT support of Vaud's upper-secondary and vocational schools. Identification data were copied, but not passwords or grades. The canton has secured the infrastructure and will file a complaint.
