Escalation path
- Open a Severity 1 case in the Edupoint support portal.
- Contact your state Synergy liaison if your district runs on a state-hosted instance.
- Escalate to Edupoint Security via your account manager and request the breach-notification clause acknowledgement.
- Notify your state SIS coordinator the same day.
Contract clauses to pull up
- State-hosted Synergy instances usually flow the breach-notification clause through the state agency contract — confirm who notifies the district and on what clock.
- Verify your supplementary data privacy agreement (SOPPA, NY Ed Law 2-d, Texas HB 18, or equivalent).
Pair with these playbooks
Student Information System compromise
PowerSchool, Aspen, Infinite Campus, Skyward, or Synergy account takeover, grade tampering, or credential-stuffing.
Family communication after a breach
Templates by severity tier — SIS down one day, vendor PII breach, ransomware affecting operations, sextortion involving a student.