Legal Action Initiated Over Data Breach
A request for a class-action lawsuit has been filed against a Montreal-area school board following a data breach at Rosemere High School. The breach, which occurred earlier this year, exposed the personal information of students and staff, including names, addresses, and possibly health records. The lawsuit, filed by a parent on behalf of affected parties, seeks compensation for damages and improved security measures.
Details of the Breach
The breach was first detected in March 2026, when unauthorized access to the school's database was discovered. According to the school board, the breach affected approximately 1,500 individuals. The compromised data included names, dates of birth, home addresses, and medical information. The board has since notified affected families and offered credit monitoring services.
Impact on the Community
Parents and students have expressed concern over the potential misuse of their personal information. One parent stated, "We trusted the school with our children's data, and they failed to protect it. This is unacceptable." The lawsuit alleges that the school board failed to implement adequate cybersecurity measures, violating privacy laws.
Legal Basis for the Lawsuit
The request for class-action certification argues that the school board was negligent in its duty to safeguard personal data. It cites violations of Quebec's privacy legislation and seeks damages for emotional distress and potential identity theft. A court hearing on the certification is expected later this year.
Response from the School Board
The school board has acknowledged the breach and stated that it is cooperating with authorities. In a statement, the board said, "We take this matter very seriously and have implemented additional security protocols to prevent future incidents." However, the board has not admitted liability.
Broader Implications
This case highlights the growing risk of data breaches in educational institutions. Experts note that schools often store sensitive information but may lack resources for robust cybersecurity. The outcome of this lawsuit could set a precedent for how such breaches are handled in Canada.
