GEMS issues alert over cyberattack on school group website
Parents have been advised to change all passwords for themselves and students and not to respond to suspicious phone calls or text messages asking for personal, banking or family information.
Informing the GEMS families of the extent of the threat, the circular further stated: “As our investigation is still ongoing, we have not yet confirmed whether any of you or your personal and financial data family were illegally consulted in connection with this cyber attack. It may take some time before we can determine the full extent of the incident. Although we can confirm that we do not store bank details or information families or guardians of our students, it is always possible that the following types of your personal data have been affected:
Identification documents (such as passport copies and Emirates ID cards or other national IDs).
Financial information (such as payment history between you and GEMS, credit information, debts due to GEMS or that GEMS owes you). We do not store bank details or credit card information.
Medical or health information (such as information about student allergies or illness-related absences).
Login information (such as usernames and passwords) for your and/or your child’s access to the GEMS systems. »
The GEMS cybersecurity team has launched a full investigation into the breach.