Network Breaches and Cyber Attacks Records at Newburgh Enlarged City School District
| Submitted | June 6, 2023 |
MuckRock users can file, duplicate, track, and share public records requests like this one. Learn more.
Communications
From: Jordan Lassiter
MuckRock News
DEPT MR 146407
263 Huntington Ave
Boston, MA 02115
Date: June 6, 2023
Newburgh Enlarged City School District
124 Grand Street
Newburgh, NY 12550
Attn: FOIL Officer
Subject: Freedom of Information Law (FOIL) Request – Records Pertaining to Network Breaches or Cyber Attacks
Dear FOIL Officer,
Under the provisions of the New York State Freedom of Information Law (Public Officers Law §87), I hereby request access to and copies of all records held by Newburgh Enlarged City School District pertaining to:
1) Any network breaches or cyber-attacks that have occurred within your organization, including any records of unauthorized access, data theft, or system compromise from January 1, 2018, to the present.
2) Any internal investigations or reviews conducted in response to a suspected or confirmed network breach, including any reports, findings, or recommendations.
3) Any incident response plans or policies in place to address network breaches, including any procedures for mitigating and remediating the effects of such incidents.
4) Any communications between your organization and affected individuals, students, staff, or partners regarding network breaches or incidents.
Should any portion of the requested records be deemed exempt from disclosure, I request the release of any reasonably segregable non-exempt portions in accordance with FOIL. If an entire document is exempt, I request a justification, citing specific FOIL exemptions, and provision of an exemption log.
Please note your obligation under the law not to destroy any records potentially responsive to this request. Any withholding, redaction, or destruction of responsive records without proper justification constitutes a violation of the FOIL and is subject to litigation.
Enclosed is a letter requesting a fee waiver for the processing of this request. As an independent investigative journalist associated with TransparencyReport.pw, I believe that the information I seek is in the public interest and its disclosure contributes significantly to public understanding of the operations or activities of the government.
If the enclosed waiver is not accepted and there are any potential charges in excess of $25 associated with fulfilling my request, please inform me in advance.
As stipulated by the FOIL, I look forward to your response within twenty business days (Public Officers Law §89(3)(a)).
Thank you for your prompt attention to this matter.
Sincerely,
Jordan Lassiter
Independent Investigative Journalist
TransparencyReport.pw
Email: Jordan@Lassiter.eu
Phone: 1-845-748-0329
Enclosure: Fee Waiver Request Letter
Please be aware: All communications related to this request, including incoming and outgoing communications, will be publicly available on MuckRock.com. Additionally, any correspondence in relation to this request will be instantly published on the platform.
The requested documents will be made available to the general public, and this request is not being made for commercial purposes.
From: Muckrock Staff
To Whom It May Concern:
I wanted to follow up on the following New York Freedom of Information Law request, copied below, and originally submitted on June 6, 2023. Please let me know when I can expect to receive a response.
Thanks for your help, and let me know if further clarification is needed.
From: Muckrock Staff
To Whom It May Concern:
I wanted to follow up on the following New York Freedom of Information Law request, copied below, and originally submitted on June 6, 2023. Please let me know when I can expect to receive a response.
Thanks for your help, and let me know if further clarification is needed.
From: Muckrock Staff
To Whom It May Concern:
I wanted to follow up on the following New York Freedom of Information Law request, copied below, and originally submitted on June 6, 2023. Please let me know when I can expect to receive a response.
Thanks for your help, and let me know if further clarification is needed.
From: Newburgh Enlarged City School District
Dear Mr. Lassiter,
In reference to your Freedom of Information Law (FOIL) request dated
6/13/2023, please see below and attached pertaining to the records you
requested.
1) Any network breaches or cyber-attacks that have occurred within your
organization, including any records of unauthorized access, data theft, or
system compromise from January 1, 2018, to the present.
To my knowledge, we had two third-party Data Breaches.
Brightly Software- School Dude
Google Directory - Dark Web
2) Any internal investigations or reviews conducted in response to a
suspected or confirmed network breach, including any reports, findings, or
recommendations.
See attached
3) Any incident response plans or policies in place to
address network breaches, including any procedures for mitigating and
remediating the effects of such incidents.
Policies attached. Safety plans redacted ( will send shortly)
4) Any communications between your organization and affected individuals,
students, staff, or partners regarding network breaches or incidents.
Attached
Sincerely,
Mona Novotny,
Records Access Officer
--
Newburgh Enlarged City School District
124 Grand Street, Newburgh, NY 12550
(845) 563-3503 Fax: (845) 563-3670
mnovotny@necsd.net
--
This is a staff email account managed by the Newburgh Enlarged City School
District. This email and any files transmitted with it are confidential
and intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify the
sender.
From: Newburgh Enlarged City School District
Good morning,
Please see attached the outstanding item.
--
Mona Novotny
District Clerk
Newburgh Enlarged City School District
124 Grand Street, Newburgh, NY 12550
(845) 563-3503 Fax: (845) 563-3670
mnovotny@necsd.net
--
This is a staff email account managed by the Newburgh Enlarged City School
District. This email and any files transmitted with it are confidential
and intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify the
sender.
