OLYMPIA, Wash. -- Personal information from Olympia School District employees was inadvertently released by the district Tuesday.
According to a district spokesperson, an outside party “spoofed” the email address of Superintendent Dick Cvitanich.
The district received an email that appeared to be from Cvitanich requesting personal information of staff members employed during 2015, said the district.
The email sought employee names, addresses, salary information and social security numbers.
A district spokesperson said the information was sent to the outside party.
When the district realized it had been victimized, local police, the Internal Revenue Service, and the state’s Attorney General’s Office were contacted, said the spokesperson.
In a written statement, a spokesperson said the district understands the severity of this issue “and are advising employees on protective measures."
Read the full statement by the Olympia School District:
"We learned at the end of the work day yesterday that we had a district data breach. The “phish” resulted in an outside entity “spoofing” the email address of the superintendent.
The person posing as the superintendent requested via email a listing of employee names, addresses, salary information and social security numbers. The list included information for employees who received a W-2 form for the calendar year January 1, 2015 through December 31, 2015.
When learning that an outside entity “phished” our district for confidential information, we responded immediately by convening a team to discuss appropriate steps regarding potential impact on current and former employees.
In addition, we notified the Olympia Police Department, Internal Revenue Service, and the Washington state Attorney General’s office as required by law.
This morning we have been working with security experts, legal counsel, insurance carrier, and the district technology team regarding a number of issues associated with this breach of information. Our first priority is to ensure our employee’s personal data.
We understand the severity of this issue and are advising employees on protective measures."