Pembina Trails School Division cyberattack investigation concludes, potential victims identified

The investigation into a cyberattack at a Winnipeg school division, which occurred a year ago, has officially concluded. (File image/PNN)


The investigation into a cyberattack at a Winnipeg school division, which occurred a year ago, has officially concluded.

Since its last update in May 2025, when Pembina Trails School Division discovered that certain files had made it onto the dark web, the division says it has completed its investigation and is now able to share groups of individuals and categories of personal information most likely affected.

According to Pembina Trails School Division, anyone enrolled between 1999 and 2024, and staff working at Pembina Trails between 2001 and 2024, may have been affected by the attack and are encouraged to review the categories and personal information likely involved in the incident on the Notice of Incident page.

Personal information potentially exposed includes birthdates, passport numbers, health card numbers, social insurance numbers, personal health information, banking info and driver’s licence numbers.

“Remain cautious, as always, when receiving emails, mail, text messages or phone calls that appear to come from Pembina Trails School Division or claim to be related to this incident or about your child,” said the school division in a statement issued online. “Be particularly vigilant about communications requesting personal information, those containing hyperlinks or any message that seems unusual.”

They are also encouraging parents to talk to their children about exercising similar precautions when they receive texts, phone calls or emails. 

 “We deeply regret that this incident occurred,” said the Pembina Trails School Division. “Our investigation is complete, and no further updates are expected regarding this matter.”