X

Frequently Asked Questions?

 


 

What happened?

On October 26, 2022, the School Town of Munster discovered an administrative file in an unexpected location and immediately launched an internal investigation. Through the investigation, we learned that a student was able to gain access to and copy an administrative file from a food services system in April 2022. We further learned that the administrative file may have also been shared with other members of the school community.

Who should I contact if I have questions?
If you have any additional questions or concerns, please send an email to
inquiry@munster.us.
Families can also contact IDX at 1-833-896-9468 Monday through Friday from 7:00 am to 7:00 pm Central Time.


How was it discovered?

On October 26, 2022, a School Town of Munster staff member discovered the administrative file in an unexpected network location and immediately initiated an internal investigation.


What was the network location?

The administrative file was discovered in a network location that is generally used to store student files. Based on this discovery, the School Town of Munster initiated an internal investigation.   

 

Why didn’t you tell affected individuals about this sooner?

After the School Town of Munster discovered the potential issue, it conducted an extensive investigation including interviewing all involved students to determine what happened, how it happened and to evaluate the extent of the issue.  Notification of the incident could not have happened prior to the conclusion of our extensive investigation.

 

What was the administrative file/why was this file on a food services system?

The file involved in this matter was used by the School Town of Munster Food Services Department to verify student lunch account balances and eligibility for lunch programs. 

 

How was the student able to access this file/the food services system?

The student used a command line interpreter application on their device to manually seek out various hosts on the network. During that process, the student came across the food services system and discovered that the system was open, thereafter proceeded to navigate to and see data stored on the system. The system had been temporarily configured in a way that did not block such access for troubleshooting purposes. The School Town of Munster immediately took steps to confirm that this issue was properly remediated.


What personal information was involved?

The information that may have been involved will be listed in the notification letter that affected families will receive. Every letter is personalized and will identify the actual information accessed for each student.  


How many people are involved?

Students enrolled in the School Town of Munster for the 2021-22 school year may be affected by this data incident. Individuals whose data may have been affected in connection with the incident will be sent notification letters on December 6, 2022. 

 

Who are the students who were involved?

The School Town of Munster is not at liberty to disclose this information.


Were students disciplined/suspended/expelled?

The School Town of Munster has taken appropriate disciplinary measures in accordance with its Student Code of Conduct. 

 

Was my/my child’s information compromised?

Receiving a letter does not mean that you/your child are or will be a victim of identity theft. The School Town of Munster is not aware of any fraudulent use of the potentially affected information. We have taken appropriate disciplinary measures and are working with the students involved, as well as their parent(s), to confirm that all copies of the administrative file have been deleted and none of the information reflected therein has been retained. However, out of an abundance of caution, we encourage you to take full advantage of the complimentary IDX services. You can also follow the instructions in your letter to help protect your/your child’s personal information.

 

What is being done to protect my information?

Upon learning of the incident, the School Town of Munster took steps to investigate and implement additional technical and administrative controls to protect our network systems. We have taken appropriate disciplinary measures and are working with the students involved, as well as their parent(s), to confirm that all copies of the administrative file have been deleted and none of the information reflected therein has been retained. The notification letter you received also includes information about identity protection services being offered to you/your child free of charge, as well as steps that you can take to help protect your personal information.

 

What is the School Town of Munster doing to prevent this kind of incident from happening again?

The School Town of Munster takes this situation extremely seriously. Since the data incident was discovered, the STM IT Department has put into place a variety of protocols such as mandatory password resets for all students, teachers and staff and the implementation of multi-factor authentication for signing into all software platforms.  In addition to an extensive internal investigation, STM brought in different external agencies which specialize in such incidents to assess the situation. STM is also contracting a cybersecurity investigation company to perform an audit to further investigate our systems to ensure all data is protected. 

The School Town of Munster has taken appropriate disciplinary measures with respect to the students involved, and will continue to encourage self-discipline, responsibility and good school citizenship in accordance with its Student Code of Conduct.

 

What is the deadline for registering for identity protection services?

The deadline to register for the identity protection services is March 6, 2023.

 

If there are any updates regarding this letter, how will I be notified?

Although the School Town of Munster does not anticipate any updates, should it have additional information to share with potentially affected individuals, it will send a follow-up letter via U.S. mail to the relevant individuals.

My student no longer attends the School Town of Munster. Why do they still have my information?

This matter involved a file that was obtained in April 2022, and thus has information for students enrolled at a School Town of Munster school for the 2021-2022 school year.
 

I did not receive a letter stating that my information was compromised but feel that I should have. Can you help me?

The School Town of Munster notified the potentially affected individuals/families by letters that went out on December 6, 2022. Of note, this incident involved only information for students enrolled at a School Town of Munster school for the 2021-2022 school year. If your student was enrolled at a School Town of Munster school during this time and did not receive a letter we understand you may still have questions.  Please feel free to email the School Town of Munster at inquiry@munster.us or contact IDX at 1-833-896-9468 Monday through Friday from 7:00 am to 7:00 pm Central Time.

 

What are the risks of identity theft with the information that was exposed?

The School Town of Munster is not aware of any fraud or identity theft as a result of this incident. Receiving a letter does not mean that you are a victim of identity theft or that your information was compromised. We have taken appropriate disciplinary measures and are working with the students involved, as well as their parent(s), to confirm that all copies of the administrative file have been deleted and none of the information reflected therein has been retained. Out of an abundance of caution, the School Town of Munster sent you a letter notifying you of the incident, offering protection services free of charge, and providing you with steps that you can take to help protect your information.

 

What should I do if my credit is compromised or there is fraudulent activity? Will I be responsible for the charges?

If you believe that you have been the victim of identity theft or have reason to believe your information is being misused, we urge you to immediately contact the police and file a police report. Obtain a copy of the police report as you may need to provide copies of the report to creditors to clear up your records. You may also contact the Federal Trade Commission and the Attorney General’s Office in your state.

 

The services offered by the School Town of Munster at no charge include identity restoration services, which will assist you in the event that your identity is compromised.

 

Are you offering credit monitoring?

The School Town of Munster mailed letters to students whose information was affected. We encourage you to follow the steps described in the letter sent to you to enroll in identity protection services free of charge. If you did not receive a letter, or if you lost your letter, please feel free to email the School Town of Munster at inquiry@munster.us or contact IDX at 1-833-896-9468 Monday through Friday from 7:00 am to 7:00 pm Central Time for assistance.

 

If we have not addressed your questions or concerns, please do not hesitate to email the
School Town of Munster at
inquiry@munster.us or 
contact IDX at 1-833-896-9468 Monday through Friday from 7:00 am to 7:00 pm Central Time for further assistance.

We appreciate your patience and understanding during this time.