Cyberattack Exposes 1 Million Files of Winnipeg School Division

Post by : Mina Carter

A school division in south Winnipeg has concluded its investigation into a cyberattack last year that exposed nearly 1 million files and sensitive personal data.

The review of the leaked files ended on November 26, with final notifications sent to affected individuals on Wednesday.

The leaked data included backups of the student information system, staff payroll excerpts, files from 12 schools, and administrative documents. The attack occurred last December when a hacker group attempted to sell the information for over $1 million in bitcoin. When no buyer emerged, the data was released on the dark web.

The notice detailed that personal information of students enrolled in 12 of the division’s 36 schools between 1999 and 2024 may have been compromised, including contact details, health information, and passport, health card, and social insurance numbers.

Staff and teachers across all schools from 2001 to 2024 were also likely affected, with information including SINs, bank account details, and disciplinary records exposed. Additionally, individuals who shared passport scans, driver’s licence numbers, or wrote cheques to the division during 2005–2024 may have been impacted.

The division is working with a security vendor to enhance protections and provide round-the-clock monitoring. Victims identified in the investigation have been notified, and no further updates are expected.

Dec. 4, 2025 3:20 p.m. 282

Canada News Education News SchoolUpdates