Notice of Florida Virtual School Data Security Incident

On Friday, March 9, 2018 Florida Virtual School (FLVS) announced a data security incidents effecting students and teachers across Florida. Because of the FLVS breach, it has been discovered that the security of certain Leon County Schools teachers and students personal information may be compromised. 

LCS is mailing affected individuals notification letters over the next few days.   

• Students and Families: If you are a Parent of a Leon County Schools student-please click HERE: https://www.leonschools.net/StudentBreach

• Teachers: If you are a Leon County Schools faculty member, please click HERE: https://www.leonschools.net/TeacherBreach

Posted Tuesday, March 13, 2018 at 9:00am 

Leon County Schools (LCS) learned of a recent data incident at Florida Virtual School involving certain staff and student personal information from 2013. Florida Virtual School has indicated that additional student and teacher records may have been compromised from May 2016 to February 2018.

LCS immediately launched an investigation. We immediately contacted the Florida Department of Law Enforcement (FDLE) who opened an investigation. We are also working with forensic experts to determine the full nature and scope of this incident.  Florida Virtual School has contacted the Federal Bureau of Investigation (FBI) who is also conducting an investigation.

Our forensic investigators determined that this incident involved a FLVS server that was misconfigured. The data on this server was from a 2013 partnership between Leon County Schools and UCompass, subsequently purchased by FLVS. From this 2013 partnership, we have identified that some current and former teachers’ social security numbers were compromised, along with names, contact information and demographic information. While FLVS is conducting notice of this event, LCS has also notified those current and former employees whose Social Security numbers were affected through traditional mail. LCS has initiated personal identity protection, inclusive of credit monitoring, immediately for these affected parties.

LCS learned from FLVS that additional information relating to LCS’ online educational services which have been hosted by FLVS since May of 2016 may have been compromised at FLVS.   This information may include teachers’ names, contact information, date of birth, demographic and emergency contact information.  While the FLVS and FDLE investigations are ongoing, FLVS is stating that none of these teachers and students had any Social Security numbers exposed.   Florida Virtual School is notifying the affected parties, including all teachers and students, by their website and in the media. That notification will include what information was compromised and how FLVS will be working with the impacted parties regarding identity protection services.

Leon County Schools is also in the process of notifying these teachers and students as well. 

We are taking this matter very seriously. We want to assure you that the privacy and security of the information in our care is one of our highest priorities. Florida Virtual School continues to release additional information and I encourage people to visit their website at www.flvs.net/notice.