About 50,000 students and employees may have had their personal info stolen. They’re getting told now.

The district publicly disclosed for the first time Tuesday the vast extent of the breach. The school district has been secretive for months about this ransomware attack, which happened between Nov. 12, 2020, and March 6, 2021, often relying on the advice of a lawyer and public relations company it hired.