InstantNewsWestU.com

HISD has determined that the district's computer hacking incident occurred by someone with access to a Pin Oak Middle School computer.

HISD has confirmed that the school district’s computer network system was hacked by someone with access to a Pin Oak Middle School computer.

A criminal investigation has been under way since the district learned that the school district’s computer system had been hacked in October. The district said it did not initially appear that any records had changed or any sensitive information lost.

In a letter to Pin Oak parents on Dec. 3, HISD Chief School Officer Dallas Dance said that the investigation into the matter is ongoing and no arrests have been made.

“We believe that the person who gained access to our network viewed the personal data of one Pin Oak student,” Dance said in his letter. “At this time, there is no evidence to suggest that any other student’s personal information was viewed.”

Several computers were removed from Pin Oak since the incident in October and authorities have spoken with several students, Dance said.

Here is Dance’s letter in its entirety:

Dear Pin Oak Middle School Community:

The Houston Independent School District has confirmed that a breach of the school system’s computer network security was accomplished by someone with access to a Pin Oak Middle School computer. A criminal investigation into this matter is ongoing. However, no arrests have been made. There are some facts that we would like to share to ensure that our parents are as informed as possible without compromising the integrity of the investigation.

Investigators first became aware of the potential network security breach in late October. Principal Susan Monaghan and her staff have fully complied with their requests for cooperation, including not sharing certain information. Since October, authorities have spoken with some Pin Oak students and have removed several computers from campus for analysis.

We believe that the person who gained access to our network viewed the personal data of one Pin Oak student. At this time, there is no evidence to suggest that any other student’s personal information was viewed.

I want to assure you that significant steps have already been taken to upgrade our network security. For more information on this incident, please visit the district’s website at www.houstonisd.org, contact the school at 713-295-6500, or the HISD Middle Schools Office at 713-556-7102.

Sincerely,

S. Dallas Dance, Ph.D.
Chief School Officer
Middle Schools Office

HISD Superintendent Terry Grier recently unveiled a $10 – $15 million plan to significantly upgrade HISD’s computer network security system after the district learned the school district’s computer system had been hacked.

The district’s aging computer system, combined with longstanding policies that allowed campuses to purchase computer hardware and install software with little oversight, have left HISD’s network particularly vulnerable to hackers, Grier informed school board members on Dec. 2.

“Fixing this will be a financially costly endeavor, but HISD parents, taxpayers, and employees must be able to trust that we take protecting their private information seriously,” Grier said.

The network security plan includes:

-      An immediate outside third-party review and action plan for the district’s entire security environment

-      Immediately strengthening current firewall security

-      Upgrading password protocols and implementing security awareness training for all employees

-      Tasking the Technology Department with overseeing all PC usage, managing remote PC access to the network, and removing some PCs from the network

-      Adding new positions in the Network Security Division

-      Limiting wireless access solely to HISD computers until the network is fully upgraded

Grier’s announcement came on the same day HISD informed parents and employees that a criminal investigation had revealed that a hacker viewed the personal records of one student and had access to private data maintained on all students, employees and some vendors dating back 10 years.

The investigation, which is ongoing, has uncovered no evidence that the private data, other than that belonging to the one student, was actually viewed by any unauthorized individuals. But because of that threat, HISD is required by Texas law to notify all potentially affected individuals of the security breach.

The first sign of a possible security breach was noticed by HISD technology workers on Oct. 24. A criminal investigation, headed by HISD Police with help from the FBI, the Regional Computer Forensics Laboratory and IBM was launched. Investigators determined shortly before the Thanksgiving holiday that a security breach had in fact occurred.

HISD employees received e-mails and parents received letters today updating them on the situation and offering information to guard against identity theft. Additional information is posted on the HISD website: www.houstonisd.org.

Parents and employees with additional questions can e-mail [email protected].

A telephone hotline will be open to receive questions, though it will have a limited capacity to handle calls. That number is 713-556-8900.