LAS VEGAS – SafeVoice, the anonymous reporting system utilized by Nevada schools for safety concerns, has experienced a data breach that compromised some personal information. The incident stems from a multistate cybersecurity issue affecting its technology vendor, Navigate360.
The Nevada Department of Education (NDE) confirmed the breach, which impacted approximately 10% of SafeVoice Nevada tips containing personally identifiable information. Despite the compromise, Navigate360 states that the SafeVoice system remains fully operational and accessible 24/7 for students and families to report safety concerns.
The NDE indicated that Navigate360 notified the state earlier this spring about the potential impact of a criminal multistate cybersecurity incident. This incident occurred between November of last year and this past March, prompting an independent forensic investigation into its scope and effects.
This month, Navigate360 concluded its forensic investigation and informed the state that a portion of SafeVoice Nevada tips had been compromised. Due to the system's design, which allows individuals to submit concerns without identifying themselves, the NDE cannot reliably pinpoint and directly notify all affected individuals.
In response, the NDE and the Nevada Department of Public Safety (DPS) are collaborating closely with school districts and local law enforcement agencies. Their joint effort aims to share critical information and provide comprehensive guidance to support students and their families who may be impacted by the breach.
Dr. Victor Wakefield, Superintendent of Public Instruction, underscored the gravity of the situation, stating that the trust placed in SafeVoice is essential and "the compromise of sensitive information is unacceptable." He added that the NDE has pressed Navigate360 for answers and is actively working with state education leaders across the country to demand greater accountability and stronger protections for students from the vendor.
The NDE and DPS are also coordinating with state education leaders nationwide to foster accountability and transparency from Navigate360 regarding the incident. This collective effort seeks to ensure that such security lapses are addressed and prevented in the future, reinforcing the security of student information in similar systems across the country.
To address specific questions and concerns from the public, Navigate360 has established a dedicated call center. This resource, managed by HaystackID, the firm that conducted the cyber forensics analysis, is available toll-free at 833-966-1754. The call center operates Monday through Friday, from 6 a.m. to 6 p.m., excluding holidays. Additionally, the NDE plans to post further information on the SafeVoice website to ensure the public understands the potential impact and how to access available assistance and remedies through Navigate360.
The cybersecurity incident has drawn significant attention beyond Nevada, including Congressional inquiries, national media coverage, and a criminal investigation by the U.S. Department of Justice. While the broader incident garnered widespread notice, Nevada-specific information remained limited until recently, with details emerging as the forensic investigation concluded.