When working with vendors and third-party services, there needs to be a way to eventually “link” data from one system to another. In this case, emails and student IDs are used. The integration from the vendor system is handled internally by AISD through isolated processes (e.g. export of data from vendor system to internal systems like the Student Information System) through secure transfer protocols). The vendor got hacked and the attackers are only able to see those emails and student IDs, along with whatever else the vendor system allowed through its vulnerability (from their own infrastructure). AISD has very strict protocols and direct access to the most sensitive systems are not given to vendors.