DataBreaches.Net

Menu
  • About
  • Breach Notification Laws
  • Privacy Policy
  • Transparency Report
Menu

NC: Page High School employee mistakenly releases 456 students’ information to a parent

Posted on July 9, 2013 by Dissent

Meanwhile, in North Carolina:

Personal information, such as grades, phone numbers and home addresses, was mistakenly released for about 456 rising Page High seniors.

On Tuesday, a school employee authorized to access the information accidentally released it to a student’s guardian, according to a news release from Guilford County Schools. The employee was answering an unrelated question and apparently attached the wrong file.

There were no other unauthorized recipients of the information.

Read more on News & Record.

The school district’s notice:

Page High Employee Accidentally Shares Student Data

Guilford County Schools (GCS) recently learned that a school employee mistakenly emailed an electronic file containing personal information for about 456 rising Page High seniors*.

The information was inadvertently sent to a Page High student’s guardian on Tuesday, July 2. The next day, the individual who received it recognized there was an issue and contacted the employee. The employee immediately asked the guardian to delete the file and told school officials what happened.

The information included student names, addresses, telephone numbers, course enrollments, grades, district-assigned identification numbers and other data points found on student transcripts. The information did not include students’ Social Security numbers.

GCS immediately started an investigation and worked to secure the data files, which had been copied in an electronic or portable document format (PDF). The investigation, which continued through the Fourth of July holiday and weekend, has confirmed that the information was shared with just one non-GCS person, and that the file sharing was not intentional.

“We work very hard in GCS to protect student privacy and data, and we are very sorry that this has occurred,” said Maurice O. Green, superintendent, noting that GCS plans to review and strengthen the district’s data sharing protocols, training and communications. “Fortunately, this error was caught quickly so the exposure is limited. We are deeply appreciative to the individual receiving the email for recognizing the error and for notifying us so quickly.”

Authorized personnel may keep a printed copy of student transcripts, or use an electronic file copy (PDF) of the data to answer questions, register students and complete course schedules when the secure, online access to the student database is not available. These files are used primarily during the summer, as one school year closes out and the online student data system is unavailable while it is updated for the coming year. The employee who sent the data was an authorized user.

“The employee who sent the file was emailing the guardian in response to unrelated questions and somehow accidentally attached the data file,” said Patrice Faison, Page High principal. “The employee feels terrible about this, and we have apologized to our parents for the error and any concern it may have caused.”

GCS and Page High have taken multiple steps to share information about the error. The school sent a voicemail message to families of rising twelfth-graders, and will also mail letters to the custodial parents/legal guardians of each affected student. General information also was shared by voicemail and email with parents, staff and community members.

In addition to the actions taken by Page High personnel, GCS has posted information on its website ( www.gcsnc.com ), GCSTV and district social media outlets. GCS is reviewing its data-sharing practices to determine whether there are other measures that should be taken to prevent a similar incident from occurring in the future.

​GCS set up a special phone line and email address for Page High parents, particularly those of rising seniors*. The phone number is 336-332-0810 and staff will be available until 8 p.m. tonight and from 8 a.m. to 6 p.m. tomorrow. The email address is [email protected] . The district also created a special website with more information about the issue, including a sample transcript: www.gcsnc.com/pagehighdata.

*Students were in 11th grade at Page High during the 2012-2013 school year.


Related:

  • How many courts have had sealed and sensitive files exposed by one vendor's error?
  • Revealed: Afghan data breach after MoD official left laptop open on train
  • The 4TB time bomb: when EY's cloud went public (and what it taught us)
  • ModMed revealed they were victims of a cyberattack in July. Then some data showed up for sale.
  • KT Chief to Resign After Cybersecurity Breach Resolution
  • Cyber-Attack On Bectu’s Parent Union Sparks UK National Security Concerns
Category: Breach IncidentsEducation SectorExposure

Post navigation

← UK: The cancer diagnosis letter found in a car park, voicemails to the wrong person and a gate-crashed consultation: Hospital data breaches up 20% in a year
Texas amends the effects of its data breach law on out-of-state residents →

Now more than ever

"Stand with Ukraine:" above raised hands. The illustration is in blue and yellow, the colors of Ukraine's flag.

Search

Browse by Categories

Recent Posts

  • District of Massachusetts Allows Higher-Ed Student Data Breach Claims to Survive
  • End of the game for cybercrime infrastructure: 1025 servers taken down
  • Doctor Alliance Data Breach: 353GB of Patient Files Allegedly Compromised, Ransom Demanded
  • St. Thomas Brushed Off Red Flags Before Dark-Web Data Dump Rocks Houston
  • A Wiltshire police breach posed possible safety concerns for violent crime victims as well as prison officers
  • Amendment 13 is gamechanger on data security enforcement in Israel
  • Almost two years later, Alpha Omega Winery notifies those affected by a data breach.
  • Court of Appeal reaffirms MFSA liability in data leak case, orders regulator to shoulder costs
  • A jailed hacking kingpin reveals all about the gang that left a trail of destruction
  • Army gynecologist took secret videos of patients during intimate exams, lawsuit says

No, You Can’t Buy a Post or an Interview

This site does not accept sponsored posts or link-back arrangements. Inquiries about either are ignored.

And despite what some trolls may try to claim: DataBreaches has never accepted even one dime to interview or report on anyone. Nor will DataBreaches ever pay anyone for data or to interview them.

Want to Get Our RSS Feed?

Grab it here:

https://databreaches.net/feed/

RSS Recent Posts on PogoWasRight.org

  • As shoplifting surges, British retailers roll out ‘invasive’ facial recognition tools
  • Data broker Kochava agrees to change business practices to settle lawsuit
  • Amendment 13 is gamechanger on data security enforcement in Israel
  • Changes in the Rules for Disclosure for Substance Use Disorder Treatment Records: 42 CFR Part 2: What Changed, Why It Matters, and How It Aligns with HIPAAs
  • Always watching: How ICE’s plan to monitor social media 24/7 threatens privacy and civic participation

Have a News Tip?

Email: Tips[at]DataBreaches.net

Signal: +1 516-776-7756

Contact Me

Email: info[at]databreaches.net
Security Issue: security[at]databreaches.net
Mastodon: Infosec.Exchange/@PogoWasRight
Signal: +1 516-776-7756
DMCA Concern: dmca[at]databreaches.net
© 2009 – 2025 DataBreaches.net and DataBreaches LLC. All rights reserved.