Officials with the Honeoye Falls-Lima school district have acknowledged an illegal intrusion into a computer system that stores students' grades and other personal information.

According to Gene Mancuso, the district superintendent, more than one student was involved in the breach. Those involved continue to be students at HF-L, he said.

A spokesperson for the Monroe County Sheriff's Office said that the breach began on Aug. 1 when "an unknown suspect was able to hack the Superintendent’s account."

The students acting under Mancuso's account did not have the ability to change records or grades, he said. The district believes they know when the incident began and ended.

It's an unfortunate incident but it is teaching a lesson, he said. They're working to identify any and all possible risks. At this time it appears the only unlawful activity is unlawful access.

It is unknown how much data was exposed, if any, but the MCSO spokesperson said the school's network was secured immediately after the breach was discovered.

The incident is still under investigation.

In a letter to parents, Mancuso said that on Sept. 19, district officials discovered that an individual or individuals had unlawfully accessed an administrative user account.

"It appears that the individual(s) accessed the 'schooltool' student information management system," Mancuso wrote. "We are confident that no records were changed."

Schooltool is a web-based system to manage student records, including students' attendance history, grades, schedules, and disciplinary incidents. The tool is also used to help teachers and parents share email messages.

Mancuso said that the district immediately took steps to change all staff network passwords and launched an investigation to determine whether any sensitive information was acquired.

"We are confident that the issue has been contained and prevented from future access," Mancuso wrote.

The District is conducting a thorough review of the potentially affected records and will notify parents directly if their child’s records were unlawfully accessed.

SLAHMAN@Gannett.com