Baltimore, MD – April 22, 2025 – Baltimore City Public Schools (BCPS) has announced that a 2023 cybersecurity incident was far more extensive than initially revealed, exposing the personal data of more than 100,000 current and former students and staff.

In a public disclosure posted on the district’s website, officials confirmed that names, Social Security numbers, student identification numbers, birth dates, and other sensitive data may have been compromised following a June 2023 breach that targeted school system networks. The attack, which occurred between May 7 and June 8, was reportedly linked to a ransomware campaign.

The investigation, carried out with the help of cybersecurity experts, revealed that “an unauthorized actor gained access to certain systems” and copied data containing personal information. Although the breach took place last year, BCPS stated that the scope and nature of the data accessed only became fully clear following a detailed forensic review.

As a result, the district is offering free credit monitoring and identity theft protection services for 12 months to affected individuals. Affected parties will begin receiving written notices this month with instructions on how to enroll in these services.

Superintendent Sonja Santelises said in a statement that BCPS takes the privacy and security of its community “very seriously” and is working to implement additional safeguards to reduce the risk of future incidents.

While BCPS did not disclose exactly how many individuals were affected, officials confirmed that the data included information from students and employees going back many years. The district also provided a dedicated toll-free hotline and website for those seeking more information or wishing to determine if their data was involved.

Cybersecurity incidents have become an increasingly common threat to public school systems across the nation, with hackers frequently targeting districts with outdated IT infrastructure. In the wake of this breach, Baltimore City Schools says it will be reviewing its technology systems and investing in more secure digital platforms.

Click here to view the complete announcement.