Electronic gradebook breach in Otwock school gave failing grades and sent abusive messages to students.
Immediate Impact
In Sunday’s breach of the electronic diary at Zespół Szkół Ekonomiczno-Gastronomicznych im. Stanisława Staszica in Otwock, students received failing grades for one subject. Additionally, vulgar messages were distributed.
The same day, parents and students were informed by deputy principal Beata Ćwiek that a teacher’s Librus account had been compromised. “We are investigating the incident. Please do not open suspicious emails or links,” she stated.
Ministerial Response
Education Minister Barbara Nowacka, questioned in Leżajsk, stated she received reports of three e-diary breaches. She emphasized that creating and storing such systems is a commercial responsibility, not the ministry’s.
Nowacka announced a state-run e-diary within mObywatel, with first phase implementation set for September 1, 2027. She stressed the need for more robust data security than current providers offer.
Deputy Education Minister Katarzyna Lubnauer highlighted that private e-diaries handle sensitive data like absences and grades, justifying the need for a secure state alternative.
Police Investigation
On Monday, police were notified. An officer reported a teacher filed a statement about an unknown perpetrator breaching the system’s security. The offense carries a fine, restricted liberty, or up to two years imprisonment.
Vendor Explanation
Librus marketing director Agata Sitarska clarified the breach was not a system vulnerability but unauthorized access to a teacher’s credentials via exposed or stolen login details.
She noted that two-factor authentication (2FA) would prevent such incidents but many schools haven’t enabled it. Librus encourages reporting breaches to authorities and provides technical support to investigations.
