Bozeman School District staff data exposed by online phishing scam

BOZEMAN, Mont. – The Bozeman School District announced that current and former staff members were affected by a data breach from a phishing campaign in March.

The District said it could “definitively confirm” that no student data was accessed or involved in the scam.

Around March 26, 2026, an “unauthorized external party” compromised a device in the Bozeman School District network using a “social-engineered phishing campaign,” the District said. The District said it responded “immediately” by following internal data breach protocols and engaged cyber security experts through its insurance policy.

It added that it received help from third-party computer forensic specialists that conducted an investigation into the nature and scope of the event. The investigation revealed that the breach exposed information for “a limited period of time between February 19, 2026 and March 27, 2026.”

The information exposed information from current and former staff members, the District said. The information included first and last names, social security numbers and dates of birth. 

The people affected by the breach will soon receive mailed letters and an offer to enroll in a n online credit monitoring service, which the District said it paid for using its insurance property.

“Bozeman School District takes the security of information in its care seriously and acted promptly to ensure this event was remediated. The District regrets this event occurred and apologizes for any concern it may cause its dedicated current and former staff,” Superintendent Casey Bertram wrote in the announcement about the breach.