Dear BSD Community: Two staff accounts were compromised on October 4th and 5th by the same IP range, which sent two messages. The first email, “First Day Packet Follow Up,” was sent on October 4th, and the “Save the Date” email was sent on October 5th. Our department investigated the suspicious account behavior, removed the phishing emails from mailboxes, secured the affected accounts, and blocked the phishing domains. To strengthen our cybersecurity, the district enhanced real-time malware protection to more quickly reclassify links as spam or phishing. The district also added a security sandbox that tests attachments in an environment before delivering them to mailboxes. The district also updated Gmail account rules to prevent mass mailing from a single account and alert team members to suspicious attempts. Going forward, BSD will activate two-factor authentication to add an extra layer of safety for all data, whether employee or student. These measures reflect our ongoing commitment to maintaining a secure environment. Thank you for your continued trust in and cooperation with the Brisbane School District.
