ACPS Identifies Phishing Scam
Allegany County Public Schools recently identified and contained a phishing campaign that impacted a small number of user email accounts. We have fully remediated the affected accounts and revoked all unauthorized external access to ensure our network remains secure.
Key Incident Information
- Account Status: The compromised accounts have been secured, and external access has been removed.
- Data Privacy: At this time, there is no evidence that any emails were read or that sensitive student or parent records were accessed.
- Exposed Information: The unauthorized user accessed our internal email Directory, which contained personal email addresses for many guardians. This directory was used to send fraudulent emails directly to members of our community.
Phishing Themes to Watch Out For
The unauthorized emails currently circulating generally fall into two main categories:
- Offers regarding fake part-time job opportunities with ACPS.
- Notifications regarding a fictional estate sale at our warehouse this weekend.
If you receive an email regarding either of these topics, please delete it immediately. Do not click any links, download attachments, or respond with personal information.
Our Next Steps & How You Can Help
ACPS is currently hardening our overall email security infrastructure and implementing stronger protocols to prevent similar attacks from targeting our systems in the future.
Cybersecurity is a shared responsibility. Please remain vigilant, practice internet safety, and carefully verify the sender of any unexpected messages. By learning to spot the signs of phishing together, we can effectively thwart these attacks and keep our community safe.