Employee, student info obtained during Rutherford County Schools network disruption

Employee and student information was subject to “unauthorized acquisition” during the Nov. 25 network and systems disruption, the school system said.
RCS Board of Education.
RCS Board of Education.(Steve Mehling)
Published: Dec. 30, 2024 at 12:49 PM CST|Updated: Dec. 30, 2024 at 11:18 PM CST
Email This Link
Share on Pinterest
Share on LinkedIn

MURFREESBORO, Tenn. (WSMV) - Rutherford County Schools has announced an update on a network disruption that led to the leak of employee information and now, the discovery of more leaks.

The school district announced that during the network and systems disruption on Nov. 25, cybersecurity specialists found that employee personal information and student information were obtained.

Rutherford County Schools has announced an update on a network disruption that led to the leak of employee information and now, the discovery of more leaks.

“As you are aware, Rutherford County Schools experienced a network and systems disruption on November 25, 2024. Our team has been investigating this matter, with the assistance of third-party cybersecurity specialists, to determine the nature and scope of the event.

The cybersecurity specialists have informed us that some employee personal information was subject to unauthorized acquisition. We do not believe it includes all of our employees, but we are conducting a thorough investigation. In addition, some student information was subject to unauthorized acquisition.

The investigation will include a thorough review of the data that was potentially impacted. Once our review is complete, we will notify affected individuals in accordance with applicable laws.”

Director of Schools Jimmy Sullivan - Rutherford County Schools

WSMV4 learned that law enforcement and national experts were investigating the incident involving the network disruption at RCS weeks after it initially occurred.

At the time the school system didn’t believe student data was obtained, but did know of the employee files that were obtained.

“This claim is being fully investigated, and to the extent it is determined that any employee personal information was affected by this event, we will notify those employees who were affected in accordance with applicable law,” RCS said after the incident.

The investigation into this incident is ongoing with the Tennessee Bureau of Investigation confirming they are assisting on the case.