LAS VEGAS — Nevada’s school safety tip platform SafeVoice was affected by a multistate cybersecurity incident tied to vendor Navigate360, the Nevada Department of Education (NDE) confirmed Thursday, saying an independent investigation found that about 10% of SafeVoice Nevada tips that contained personally identifiable information were compromised.
What the state says and the vendor response
NDE officials said they were notified by Navigate360 earlier this spring that SafeVoice might have been impacted by a criminal cybersecurity incident that took place between November of last year and March of this year. The vendor told the state that an independent forensic investigation was underway. Navigate360 has said SafeVoice remains fully operational and available 24/7 for students and families to report safety concerns.
“SafeVoice gives Nevada students a way to speak up when they are concerned about their own safety or the well-being of someone else, connecting those concerns with adults who can step in and help before harm occurs,”
said Dr. Victor Wakefield, Nevada Superintendent of Public Instruction. He added the state has pressed Navigate360 for answers and is working with education leaders to demand greater accountability and protections for students.
Scope and limitations of notifications
According to NDE, the forensic investigation concluded that approximately 10% of tips submitted to SafeVoice Nevada that included personally identifiable information were compromised. Because SafeVoice is designed to allow anonymous reports, NDE said it cannot reliably identify and directly notify all affected individuals.
State agencies, including the Department of Public Safety (DPS), are coordinating with school districts and local law enforcement to share available information and provide guidance and support for students and families. NDE did not provide a list of specific districts affected or the exact number of Nevada tips involved.
National attention and ongoing investigations
The breach drew national media coverage and prompted Congressional inquiries as well as a criminal investigation by the U.S. Department of Justice. NDE said it has been engaging with state education leaders across the country in response and has demanded stronger protections and transparency from Navigate360.
Timeline of known events
| Time period | Event |
|---|---|
| November (prior year)–March (this year) | Period during which the criminal cybersecurity incident occurred, per Navigate360 |
| Earlier this spring | Navigate360 notified Nevada the system may have been affected and began a forensic investigation |
| October (this month) | Forensic investigation concluded that about 10% of tips with PII in Nevada were compromised; state officials notified |
What officials are doing now
- Pressing Navigate360 for detailed answers and accountability.
- Coordinating between NDE, DPS, school districts and local law enforcement to share information and guidance.
- Monitoring developments in the federal criminal investigation and related Congressional inquiries.
Officials emphasized that SafeVoice continues to provide a channel for students and families to report threats or concerns. Because the system was designed to permit anonymous tips, the state faces limits in determining precisely who may have been affected and how many individuals had identifiable information stored in the system.
The breach raises questions about data protections for tools intended to help prevent school violence and keep students safe. NDE officials said they will continue to work with other states and with Navigate360 to seek stronger privacy safeguards and accountability measures for vendors that handle student safety reports.
As the investigation proceeds, families and school administrators seeking more information are being directed to their local district offices and to state education resources for updates and guidance.
Reporting for this story relied on NDE statements and notifications from Navigate360; the state has not released a detailed breakdown of the number of Nevada tips affected or identified individuals. Additional developments and further disclosures about the scope of the breach are expected as federal and local investigations continue.
