WEAU | Eau Claire, Wisconsin | News

Hack of CESA 10 web portal reveals faculty passwords


(WEAU)--A school district service agency says teachers’ passwords were hacked. CESA 10's administrator tells WEAU its old web portal where teachers registered for classes was hacked, and it’s now using a new site that is not affected. CESA, which stands for Cooperative Education Service Agency, serves 29 school districts in our area.

It sent a statement to affected school personnel Tuesday evening. It says the information that was hacked is old, but did include passwords. While the information was old, CESA's note asks teachers to change their passwords if they tend to use the same one for other things in their daily life.

“Within a couple of hours we had notified teachers and administrators of affected districts,” CESA 10 Administrator Mike Haynes said.

Haynes says the hacked website ‘My CESA Portal’ has been shut down. He says the website, which teachers and school employees used to use for tracking events and classes they attended, has been out of service for a year.

“It was only maintained for archival purposes for educators who wanted to log in and access that info,” Haynes said.

Haynes says the website was hosted by UW-Madison and its Technology Division is looking into its security system.

“We don't know the location of the hackers or who they would possibly be all we know is that the site is one frequented by hackers but no rhyme or reason to why this information was needed. They (UW-Madison Technology) have confirmed today that there was no information that was particularly of importance that was accessed through the server,” said Haynes. He added, “As an agency we are always taking steps to ensure the safety and security of our information technology.”

One of the districts affected is the Eau Claire School District. Around 100 current and former employees are some of the 8,000 people whose information was hacked. Technology and Assessment Director Jim Schmitt says no district-wide information was released in the hack and they are working with their staff to make sure their passwords are protected.

-----------

(WEAU) - A school district service agency says teachers’ passwords were hacked and Tuesday night it's getting out the message to the people affected.

CESA 10's administrator tells WEAU its old web portal where teachers registered for classes was hacked, and it’s now using a new site that is not affected.

CESA, which stands for Cooperative Education Service Agency, serves 29 school districts in our area.
It sent a statement to affected school personnel Tuesday evening. It says the information that was hacked is old, but did include passwords. While the information was old, CESA's note asks teachers to change their passwords if they tend to use the same one for other things in their daily life.

WEAU was able to locate the hacker's page, which appears to be from Africa. It claims it has e-mails and phone numbers as well as passwords for 8,000 people. WEAU is not listing the website’s address out of respect to the teachers listed.

The CESA administrator plans to talk to us Wednesday about the situation.

-----------------------------------------------------------------------------------
Here's the notice sent to affected school personnel from CESA 10:

Today we learned that the "My CESA Portal," formerly used to track teacher registrations for events at CESA 10 and other CESAs in Wisconsin, was hacked recently and login data was posted on a public site frequented by hackers.

The My CESA Portal service was hosted by University of Wisconsin-Madison, Division of Information Technology and contains old data. The passwords posted were used for the My CESA Portal, which is no longer in service.

Nonetheless, since many people use the same password for different services, we sent a notice out to all affected emails associated with My CESA Portal that users should change their passwords for other applications to prevent or reduce risk.

CESA 10 is currently using myQuickReg.com for event registration, which is a service hosted by CESA 6 and not affected by this attack.


WEAU 13 NEWS 1907 S. Hastings Way Eau Claire, WI 54701 By Phone: Main Number (715) 835-1313 and (715) 832-3474. Tip Line (715) 839-WEAU - (715) 839-9328 Sports Line (715) 852-1537
Gray Television, Inc. - Copyright © 2002-2014 - Designed by Gray Digital Media - Powered by Clickability 206531721