Grades altered in suspected password theft at Seattle schools

Seattle Public Schools is investigating how many student grades may have been changed in a case of suspected computer password theft.

Five teachers at Ingraham High recently reported that some grades were altered without their knowledge, said Jim Ratchford, the district's chief information officer.

He said the district suspects that someone — or several people — swiped the passwords for those five teachers' online grade books, possibly using a "key logger" device in computer USB ports.

The devices, which look like flash drives, record all keystrokes on a computer, including network passwords used by teachers.

Some teachers have reported overhearing students talking about using such a device, he said.

The district doesn't yet know how widespread the problem is. Right now, Ratchford said, there is suspicious activity at three high schools: Ballard, Ingraham and Sealth.

Ratchford sent an email to all school staff Thursday morning, asking them to report any suspicious grade changes.

Ratchford also advised teachers to contact district IT staff if they located any suspicious devices plugged into their computers, or if they have trouble logging in with their passwords.

In his initial email to teachers and staff, Ratchford said a key logger had been used but said later in the day that officials have not confirmed that.

A district spokeswoman also could not immediately confirm that grades were changed but Ratchford, in both his initial email and later in the day, said they were.

The district's IT staff is now investigating grade-change activity in district computer systems over the past few weeks to look for any unusual activity.

If it appears the problem is widespread, Ratchford said, the district may decide to change computer passwords districtwide.

The password thefts did not affect The Source, the district's online system that students and parents use to check student grades, test scores and other information.

Along with grades, Ratchford said that password thieves, if they used a key logger, could have captured personal information that teachers or others may have entered at their computers — including email messages, Internet URLs, bank and other personal account information.

Linda Shaw: 206-464-2359 or lshaw@seattletimes.com; Jim Brunner: 206-515-5628 or jbrunner@seattletimes.com