Burnaby Schools says threat actor may have put student and staff data on dark web
Burnaby School District updated families on November 3 that files from the September cyberattack may have been published on the dark web by the threat actor. An outside expert is checking the claim.
Announcement. A campaign, a party or the City chose to say this. voche.me reports it as their claim. Read the original report on burnabyschools.ca.
Burnaby School District says the people behind its September cyberattack claim to have put files from the attack on the dark web, a part of the internet used to sell or leak stolen data. The district added the news to its incident page, in an update dated November 3, 2026.
"We have recently received reports that the threat actor claims to have published files and information from this incident on the dark web," the district wrote. "We have reason to believe that some files taken from the school district may have been included." It says it has engaged an external expert to confirm whether that is the case and, if so, what information was affected.
What may have been taken
The district discovered the ransomware attack on September 21, 2026. On October 15, CTV News reported that the district had confirmed personal information of students, parents and staff was stolen.
The district's page lists the student and family information that may have been affected: names, contact information, Personal Education Numbers, dates of birth, grades and schools for 2024 and 2026; registration forms and residency documents, such as citizenship, permanent resident or visa papers, leases and utility bills, for students who enrolled in 2024 or 2026; kindergarten assessment notes from 2021 to 2025; and lists of students receiving specialized learning supports, in some cases with a diagnosis. In a smaller number of cases, bus routing information, student intervention records and other assessments were affected.
Staff personnel records were also put at risk, including files about some former employees. The district says it is contacting former staff directly.
What the district has done
The district reported the attack to the Burnaby RCMP and the Office of the Information and Privacy Commissioner for BC. Phone service returned at all schools on September 28, and the MyEducation family portal on October 1.
On October 14 it offered students registration with TransUnion's Fraud Alert Database, which warns participating creditors to check a person's identity before giving credit. Staff were offered TransUnion's services after a notice on October 1. The district asks families to be careful with unexpected emails, texts or calls that ask for personal information.
The new board
The district's calendar lists a public meeting of the Burnaby Board of Education on November 24, 2026 at 7 pm at the District Administration Office, 4054 Norfolk Street. All seven trustees elected on October 17 ran with the Burnaby Citizens Association: Kristin Schnider, Bill Brassington, Hillary Bergshoeff, Jen Mezei, Paul Kwon, Stephen Andrada and Colin Zuo.
Questions this story answers
What did Burnaby Schools say on November 3, 2026?
The district updated its incident page to say: "We have recently received reports that the threat actor claims to have published files and information from this incident on the dark web. We have reason to believe that some files taken from the school district may have been included."
Is the district checking whether the files were published?
Yes. The district says it has engaged an external expert to help confirm whether files taken from the district were among those published and, if so, the nature and extent of the information affected. The district says it will keep the community updated as the investigation goes on.
When did the cyberattack happen?
The district says it discovered the ransomware attack on September 21, 2026. It says an unauthorized party gained access to district systems and that files containing personal information were copied and stolen. It affected internal network services and phone lines at the time.
What student and family information may have been taken?
The district lists names, contact information, Personal Education Numbers, dates of birth, grades and schools for 2024 and 2026; registration and residency documents for students who enrolled in 2024 or 2026; kindergarten assessment notes from 2021 to 2025; and lists of students receiving specialized learning supports.
Was staff information also affected?
Yes. The district says information in staff personnel records was put at risk, and that files about some former employees were among those affected. It says it is contacting former staff directly. CTV News reported on October 15, 2026 that what was taken varies from one staff member to another.
Who was the attack reported to?
The district says it reported the attack to the Burnaby RCMP and to the Office of the Information and Privacy Commissioner for BC. CTV News reported the same on October 15, 2026, when the district first confirmed that personal information had been stolen by what it called criminal actors.
What help is the district offering families and staff?
On October 14 the district offered students registration with TransUnion's Fraud Alert Database, which alerts participating creditors so they can check an applicant's identity before giving credit. The district says this does not mean every student is at high risk. Staff were offered TransUnion's services after a notice on October 1.
When does the new Burnaby school board meet?
The district's events calendar lists a public meeting of the Burnaby Board of Education on November 24, 2026 at 7 pm at the District Administration Office. The seven trustees elected on October 17, 2026 all ran with the Burnaby Citizens Association.
Sources
The pages this story draws on. Open one to check a claim yourself.
Found an error? Tell the editors with the corrections form. A correction is noted on the story it changes. Read our standards.
