AOS 77 hacking affects hundreds

The AOS 77 school system's central office computer server was hacked sometime after schools were let out for the Thanksgiving break, resulting in a possible data breach of personal information for hundreds of current and former employees of the schools in the AOS.
AOS Superintendent Ken Johnson says he cannot say for certain whether there was a data breach, but the AOS is "proceeding with caution" and has notified all of its current and former employees in writing, encouraging them to monitor their financial transactions. Currently nine towns belong to the AOS -- Alexander, Baring, Charlotte, Crawford, Dennysville, Eastport, Lubec, Pembroke and Perry -- with Robbinston and Calais previously having been part of the district. Employees of previous school departments now in the district -- School Union 104, School Union 106 and MSAD 19/RSU 85 -- are also affected. "It's pretty overwhelming right at the moment," he comments.
"It's difficult to verify what was compromised," Johnson explains, adding, "There's the potential for the compromise of personal information." While no student records were accessed, school board members could be affected, along with employees.
The hacking incident has been referred to law enforcement, with Johnson noting that breaking into a computer system operated by a government entity is a serious matter. Johnson says that the AOS did not receive any ransom message with the hacking.
Financial institutions to which the AOS uploads data have been notified, along with the AOS' insurance carrier, with Johnson stressing that the AOS does carry insurance on its data. The superintendent says the AOS office is trying to rebuild its digital files using backups and is seeking specialized help for a security analysis from the AOS' software provider, Tyler Technologies.
"Currently we host the data on a server owned by the AOS and housed here" at the AOS office in Eastport, Johnson notes. At the next AOS board meeting, the board will consider whether to host its data off site and also whether to use a separate contractor to maintain the data. The superintendent says Tyler Technologies can host the AOS database and then would be responsible for the security of the data. The company's security division has been highly recommended, and its services are included under the existing contract with the AOS.
Johnson observes, "In this modern age of technology, the risk is out there for everybody, whether a municipality, a school district or an individual. The threats are becoming more and more sophisticated."