Durham District School Board Company Cyber Security Posture
ddsb.caDurham District School Board (DDSB) is responsible for public education in the rural communities of Uxbridge, Brock and Scugog townships and the cities and towns of Ajax, Whitby, Pickering and Oshawa. We employ over 10,000 teaching and educational services staff in 135 elementary and secondary schools and learning centres. DDSB has more than 79,000 regular day students and thousands more who take continuing education and adult credit courses. More information can be found on the Board’s website at www.ddsb.ca. Please follow us on Twitter and Instagram @DDSBschools and on Facebook @DurhamDistrictSchoolBoard.
DDSB Company Details
durham-district-school-board
4373 employees
12725.0
923
Education Administration Programs
ddsb.ca
Scan still pending
DUR_7746516
In-progress
DDSB Risk Score (AI oriented)Between 900 and 1000
This score is AI-generated and less favored by cyber insurers, who prefer the TPRM score.
DDSB Global Score.png)
Durham District School Board Company Scoring based on AI Models
| Model Name | Date | Description | Current Score Difference | Score |
|---|---|---|---|---|
| AVERAGE-Industry | 03-12-2025 | This score represents the average cybersecurity rating of companies already scanned within the same industry. It provides a benchmark to compare an individual company's security posture against its industry peers. | N/A | Between 900 and 1000 |
Durham District School Board Company Cyber Security News & History
| Entity | Type | Severity | Impact | Seen | Url ID | Details | View |
|---|---|---|---|---|---|---|---|
| Durham District School Board | Breach | 75 | 3 | 01/2022 | DUR11424422 | Link | |
Rankiteo Explanation : Attack with significant impact with internal employee data leaksDescription: The names of staff at Durham District School Board who are not vaccinated for COVID-19 were exposed in a data security breach incident. The board mistakenly attached a spreadsheet of the names of about 800 unvaccinated or undisclosed staff while sending out a “routine” email about rapid testing. The board apologized to the affected staff and provided additional training for all staff involved with secure documents to prevent any such happenings in future. | |||||||
Durham District School Board Company Subsidiaries
Durham District School Board (DDSB) is responsible for public education in the rural communities of Uxbridge, Brock and Scugog townships and the cities and towns of Ajax, Whitby, Pickering and Oshawa. We employ over 10,000 teaching and educational services staff in 135 elementary and secondary schools and learning centres. DDSB has more than 79,000 regular day students and thousands more who take continuing education and adult credit courses. More information can be found on the Board’s website at www.ddsb.ca. Please follow us on Twitter and Instagram @DDSBschools and on Facebook @DurhamDistrictSchoolBoard.
Access Data Using Our API
Get company history
Rapid.png)
DDSB Cyber Security News
School Board Cyberattacks Will Rise in 2025, Says U of G Cybersecurity Expert
In these attacks, malicious actors infiltrate an organization's network, encrypt critical data and demand a ransom to restore access. They ...
3 GTA school boards say student info may have been exposed in 'cyber incident'
The incident involves PowerSchool, an application used to store a range of student information and some information about school-based staff, ...
Decades of data was compromised in a DDSB cyber incident. Were you impacted?
The board notified families on Jan. 8 that they had been impacted by a cyber breach at PowerSchool, a company that provides software tools to ...
PowerSchool hack exposes student, teacher data from K-12 districts
Education software giant PowerSchool has confirmed it suffered a cybersecurity incident that allowed a threat actor to steal the personal ...
Personal information of Ontario students going back decades may have been breached in cyberattack
Personal information of Ontario students going back decades may have been breached in cyberattack. Students' information that was breached in an ...
What parents need to know about the PowerSchool data breach
The attacker behind the data breach impacting several school boards across the Greater Toronto Area and abroad may have gotten access to staff and students' ...
PAUL W. BENNETT: PowerSchool breach signals widespread breakdown
The PowerSchool cyberattack was a big deal, even though it was treated by school officials as a simple matter of “containment” within each state, province or ...
PowerSchool data breach now at 2.4M Canadian kids. How to protect yourself
More than 2.4 million students in Canada have been impacted by the PowerSchool data breach, and that number is likely to grow as more ...
TDSB says cybersecurity breach may impact student data as far back as 1985
The Toronto District School Board (TDSB) revealed on Monday that the PowerSchool breach from earlier this year may have exposed student data ...
DDSB Similar Companies
Beaconhouse Group
The Beaconhouse School System has risen from its modest beginnings in 1975 as Les Anges Montessori Academy to become a major force in the education world. With an ever-expanding base, already established in Malaysia, the Philippines, Pakistan, the UAE, Oman, Belgium and Thailand, Beaconhouse is one
NSW Department of Education
At the NSW Department of Education, our goal is to be Australia's best education system and one of the finest in the world. We prepare young people for rewarding lives as engaged citizens in a complex and dynamic society. With nearly 100,000 employees working in schools and offices throughout the s
KinderCare Learning Companies
Transform lives—including yours—with the nation’s leading provider of early childhood education and child care. We don’t just hold ourselves to the highest standards; we set new ones. Our accredited programs, talented teachers, and research-based curriculum empower children to explore their limitles
Lovely Professional University
Lovely Professional University (LPU) is an ASSOCHAM’s National Education Excellence Award-winning institution and has also been ranked as top Education Brand of India in Economic Times. LPU is a multi-disciplined university and offers 200+ programs in 40+ disciplines. These programs are recognized
Ministry of Education, Morocco
Le Ministère de l'Education Nationale élabore et met en oeuvre, dans le cadre des lois et règlements en vigueur, la politique du gouvernement dans le domaine de l'enseignement préscolaire, fondamental et secondaire, les formations de BTS et les classes préparatoires aux grandes écoles, et assure, da
New Oriental Education & Technology Group
As the largest provider of private educational services in China, New Oriental offers education for a lifetime, teaching skills that give students a crucial competitive advantage in the workplace and helps improve their quality of life. Our wide range of educational programs, services and products i
Frequently Asked Questions
Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
DDSB CyberSecurity History Information
How many cyber incidents has DDSB faced?
Total Incidents: According to Rankiteo, DDSB has faced 1 incident in the past.
What types of cybersecurity incidents have occurred at DDSB?
Incident Types: The types of cybersecurity incidents that have occurred incident Breach.
How does DDSB detect and respond to cybersecurity incidents?
Detection and Response: The company detects and responds to cybersecurity incidents through remediation measures with Additional training for staff involved with secure documents and communication strategy with Apology to affected staff.
Incident Details
Can you provide details on each incident?
Incident : Data Breach
Title: Durham District School Board Data Security Breach
Description: The names of staff at Durham District School Board who are not vaccinated for COVID-19 were exposed in a data security breach incident. The board mistakenly attached a spreadsheet of the names of about 800 unvaccinated or undisclosed staff while sending out a “routine” email about rapid testing. The board apologized to the affected staff and provided additional training for all staff involved with secure documents to prevent any such happenings in future.
Type: Data Breach
Attack Vector: Human Error
Vulnerability Exploited: Improper handling of sensitive information
Threat Actor: Internal
What are the most common types of attacks the company has faced?
Common Attack Types: The most common types of attacks the company has faced is Breach.
Impact of the Incidents
What was the impact of each incident?
Incident : Data Breach DUR11424422
Data Compromised: Names of unvaccinated or undisclosed staff
What types of data are most commonly compromised in incidents?
Commonly Compromised Data Types: The types of data most commonly compromised in incidents are Personally Identifiable Information.
Which entities were affected by each incident?
Incident : Data Breach DUR11424422
Entity Type: Educational Institution
Industry: Education
Location: Durham, Ontario, Canada
Response to the Incidents
What measures were taken in response to each incident?
Incident : Data Breach DUR11424422
Remediation Measures: Additional training for staff involved with secure documents
Communication Strategy: Apology to affected staff
Data Breach Information
What type of data was compromised in each breach?
Incident : Data Breach DUR11424422
Type of Data Compromised: Personally Identifiable Information
Number of Records Exposed: 800
Sensitivity of Data: High
File Types Exposed: Spreadsheet
Personally Identifiable Information: Names of unvaccinated or undisclosed staff
What measures does the company take to prevent data exfiltration?
Prevention of Data Exfiltration: The company takes the following measures to prevent data exfiltration: Additional training for staff involved with secure documents.
Lessons Learned and Recommendations
What lessons were learned from each incident?
Incident : Data Breach DUR11424422
Lessons Learned: Proper handling and verification of sensitive information before sending emails.
What recommendations were made to prevent future incidents?
Incident : Data Breach DUR11424422
Recommendations: Implement stricter protocols for handling sensitive data and conduct regular training sessions for staff.
What are the key lessons learned from past incidents?
Key Lessons Learned: The key lessons learned from past incidents are Proper handling and verification of sensitive information before sending emails.
What recommendations has the company implemented to improve cybersecurity?
Implemented Recommendations: The company has implemented the following recommendations to improve cybersecurity: Implement stricter protocols for handling sensitive data and conduct regular training sessions for staff..
Investigation Status
How does the company communicate the status of incident investigations to stakeholders?
Communication of Investigation Status: The company communicates the status of incident investigations to stakeholders through was Apology to affected staff.
Post-Incident Analysis
What were the root causes and corrective actions taken for each incident?
Incident : Data Breach DUR11424422
Root Causes: Human error in email communication
Corrective Actions: Additional training for staff
What corrective actions has the company taken based on post-incident analysis?
Corrective Actions Taken: The company has taken the following corrective actions based on post-incident analysis: Additional training for staff.
Additional Questions
General Information
Who was the attacking group in the last incident?
Last Attacking Group: The attacking group in the last incident was an Internal.
Impact of the Incidents
What was the most significant data compromised in an incident?
Most Significant Data Compromised: The most significant data compromised in an incident was Names of unvaccinated or undisclosed staff.
Data Breach Information
What was the most sensitive data compromised in a breach?
Most Sensitive Data Compromised: The most sensitive data compromised in a breach was Names of unvaccinated or undisclosed staff.
What was the number of records exposed in the most significant breach?
Number of Records Exposed in Most Significant Breach: The number of records exposed in the most significant breach was 800.0.
Lessons Learned and Recommendations
What was the most significant lesson learned from past incidents?
Most Significant Lesson Learned: The most significant lesson learned from past incidents was Proper handling and verification of sensitive information before sending emails.
What was the most significant recommendation implemented to improve cybersecurity?
Most Significant Recommendation Implemented: The most significant recommendation implemented to improve cybersecurity was Implement stricter protocols for handling sensitive data and conduct regular training sessions for staff..
What Do We Measure?
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
These are some of the factors we use to calculate the overall score:
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.
