The Upper Perkiomen School Board recently took action to enhance its internet security. Earlier this month, the members approved two action items at a total cost of more than $204,000. Both motions cover the next three school years.

            The members voted to approve a three-year contract with Varonis, an automated data security company, at a total cost of $188,151.84 to protect personally identifiable and confidential information. They also ratified an agreement with the MCIU Mimecast for email security and phishing protection, according to the action item language included in the Aug. 14 regular meeting. The funds for the purchases were budgeted, according to information provided by district spokesperson Alexis Jenofsky.

            Implementation of these tools will not disrupt the district's network, according to an email from the spokesperson. She wrote in an email message that administrators are continually evaluating the district's internet security measures to add new layers of protection to strengthen infrastructure and prevent potential issues.

            Jenofsky said each product was carefully researched and selected to expand the district's defenses against phishing and improve data access monitoring. In the message, Jenofsky said Varonis would monitor its data systems for changes, protect its enterprise information integration and alert administrators if unusual activity is detected. The subscription requires three annual payments of $62,717.28, according to the meeting agenda.

            Mimecast will provide the district with phishing awareness training and email scans for potential threats. The service will cost the district $5,317.60 annually.

            On March 14, 2024, the board announced that the district sustained a network outage. Six months later, administrators confirmed that an unauthorized individual encrypted portions of the district's network and copied certain files between March 1 and March 12 of that month.

           Working with a data privacy law firm, the district announced that individuals' Social Security number and medical information were exposed.

A letter to a 2004 graduate revealed the exposure of a Social Security number and health insurance information. The investigation determined that personal information was reviewed, according to the letter mailed to impacted residents. It states that while no evidence exists that any of the information has been used fraudulently, the district offered access to single-bureau credit monitoring, credit report and credit score services for one year, from My TrueIdentity.

            The district covered the cost of the monitoring. It also provided complimentary proactive fraud insurance through Cyberscout, a TransUnion company that specializes in fraud assistance and remediation services.