Network Breaches and Cyber Attacks Records at Newburgh Enlarged City School District

Jordan Lassiter filed this request with the Newburgh Enlarged City School District of Newburgh, NY.
Status
Completed

Communications

From: Jordan Lassiter

MuckRock News
DEPT MR 146407
263 Huntington Ave
Boston, MA 02115

Date: June 6, 2023

Newburgh Enlarged City School District
124 Grand Street
Newburgh, NY 12550

Attn: FOIL Officer

Subject: Freedom of Information Law (FOIL) Request – Records Pertaining to Network Breaches or Cyber Attacks

Dear FOIL Officer,

Under the provisions of the New York State Freedom of Information Law (Public Officers Law §87), I hereby request access to and copies of all records held by Newburgh Enlarged City School District pertaining to:

1) Any network breaches or cyber-attacks that have occurred within your organization, including any records of unauthorized access, data theft, or system compromise from January 1, 2018, to the present.

2) Any internal investigations or reviews conducted in response to a suspected or confirmed network breach, including any reports, findings, or recommendations.

3) Any incident response plans or policies in place to address network breaches, including any procedures for mitigating and remediating the effects of such incidents.

4) Any communications between your organization and affected individuals, students, staff, or partners regarding network breaches or incidents.

Should any portion of the requested records be deemed exempt from disclosure, I request the release of any reasonably segregable non-exempt portions in accordance with FOIL. If an entire document is exempt, I request a justification, citing specific FOIL exemptions, and provision of an exemption log.

Please note your obligation under the law not to destroy any records potentially responsive to this request. Any withholding, redaction, or destruction of responsive records without proper justification constitutes a violation of the FOIL and is subject to litigation.

Enclosed is a letter requesting a fee waiver for the processing of this request. As an independent investigative journalist associated with TransparencyReport.pw, I believe that the information I seek is in the public interest and its disclosure contributes significantly to public understanding of the operations or activities of the government.

If the enclosed waiver is not accepted and there are any potential charges in excess of $25 associated with fulfilling my request, please inform me in advance.

As stipulated by the FOIL, I look forward to your response within twenty business days (Public Officers Law §89(3)(a)).

Thank you for your prompt attention to this matter.

Sincerely,
Jordan Lassiter
Independent Investigative Journalist
TransparencyReport.pw
Email: Jordan@Lassiter.eu
Phone: 1-845-748-0329

Enclosure: Fee Waiver Request Letter

Please be aware: All communications related to this request, including incoming and outgoing communications, will be publicly available on MuckRock.com. Additionally, any correspondence in relation to this request will be instantly published on the platform.

The requested documents will be made available to the general public, and this request is not being made for commercial purposes.

From: Newburgh Enlarged City School District

Dear Mr. Lassiter,

In reference to your Freedom of Information Law (FOIL) request dated
6/13/2023, please see below and attached pertaining to the records you
requested.

1) Any network breaches or cyber-attacks that have occurred within your
organization, including any records of unauthorized access, data theft, or
system compromise from January 1, 2018, to the present.

To my knowledge, we had two third-party Data Breaches.

Brightly Software- School Dude

Google Directory - Dark Web

2) Any internal investigations or reviews conducted in response to a
suspected or confirmed network breach, including any reports, findings, or
recommendations.

See attached

3) Any incident response plans or policies in place to
address network breaches, including any procedures for mitigating and
remediating the effects of such incidents.

Policies attached. Safety plans redacted ( will send shortly)

4) Any communications between your organization and affected individuals,
students, staff, or partners regarding network breaches or incidents.

Attached

Sincerely,

Mona Novotny,

Records Access Officer
--

Newburgh Enlarged City School District
124 Grand Street, Newburgh, NY 12550

(845) 563-3503 Fax: (845) 563-3670
mnovotny@necsd.net

--
This is a staff email account managed by the Newburgh Enlarged City School
District.  This email and any files transmitted with it are confidential
and intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify the
sender.

From: Newburgh Enlarged City School District

Good morning,

Please see attached the outstanding item.

--
Mona Novotny

District Clerk
Newburgh Enlarged City School District
124 Grand Street, Newburgh, NY 12550

(845) 563-3503 Fax: (845) 563-3670
mnovotny@necsd.net

--
This is a staff email account managed by the Newburgh Enlarged City School
District.  This email and any files transmitted with it are confidential
and intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify the
sender.

Files

pages

Close