IVC confirms some personal data breached in ransomware attack

IMPERIAL – Imperial Valley College has confirmed some personal data was breached in the ransomware attack that caused the college’s entire computer network to be shut down in August.

In an email to students sent Monday, IVC President and Superintendent Dr. Martha Garcia said investigation of the attack has been completed, and the college has received a preliminary report indicating personal information was retrieved when the system was compromised.

“While we have no evidence to suggest that any of the impacted information was viewed or misused during this compromise,” she said, “we are working diligently to identify affected individuals and will notify them in accordance with all state and federal laws. We will provide measures to assist them in protecting their private information.”

Garcia said IVC first became aware its network may have been compromised on Aug. 6. “Upon discovery, our IT Department took proactive measures to secure the school’s network systems and swiftly engaged a third-party forensic company to investigate,” she said. “Additionally, we dedicated all of our IT and engineering resources to resolve the problem.”

Because the fall semester was scheduled to begin 11 days after the attack, Garcia the college decided it ultimately was in the best interests of students and employees to pay the $55,068 ransom that was demanded.

“This enabled us to get our key systems to function and start the semester with one week delay,” she said. “The funds were provided through our insurance coverage and no general fund or categorical dollars were involved.”

Garcia said most of IVC’s systems are fully operational. “However, IT continues to work diligently on some final projects related to this incident,” she added. “We are grateful to the entire IT team.”

Garcia said anyone directly impacted by the data breach will receive a letter providing direction and support within 15 days of Monday’s email.

“I recognize that this has been and is a traumatic experience and I sincerely apologize to you,” Garcia said. “I assure you that we have learned some difficult lessons from it and will do our best as we move forward.”