DataBreaches.Net

Menu
  • About
  • Breach Notification Laws
  • Privacy Policy
  • Transparency Report
Menu

Horrific privacy breach by Tewksbury Public Schools

Posted on April 4, 2015 by Dissent

Cross-posted from PogoWasRight.org.

Okay, this is really bad, on multiple levels. Brendan Foley and Jayne Miller report:

Tewksbury Public Schools face angry parental backlash following the release of private student information online last week. A document included in a 222-page School Committee packet remained online for the better part of a week, before being taken down Monday.

Awareness of the data, which details private information for the out of district placements of 83 students and rates their parents according to their “cooperativeness” with the district, raised outrage on social media over the weekend.

[…]

The seven-page memo from Rick Pelletier, Director of Student Services, to the Superintendent was included in the School Committee packet as part of its budget justification package last week. The memo includes a spreadsheet that listed all the students with out of district placements – and also included a ranking on ‘parental cooperativeness.’ The amount of data included could indicate a violation of state and federal law.

The list, which replaces student names with numbers, remains in alphabetical order. Information included the student’s current grade, the out-of-district school, the last school attended, the year the student began attending the new school, information on whether or not the decision was made by the IEP team, a legal settlement (typically kept strictly confidential), or if the student moved in from another town, and miscellaneous detail such as the involvement of the Department of Children and Families, passage of MCAS assessments, and more.

The office of Student Services also published its rating of parents according to their ‘cooperativeness with the district.’ Parents rated a ‘1’ are cooperative, ‘2’ somewhat cooperative, and those rated ‘3’ are ‘not cooperative.’

The Town Crier could easily identify seven families included in the list, and was contacted by others that could identify more families based on the material in the sheet.

Read more on The Town Crier to read responses from the state, the U.S. Education Department, parents, and a special education attorney. It seems like the district is not acknowledging any FERPA breach or breach under state law.

Un-effing-believable.


Related:

  • Veradigm's Breach Claims Under Scrutiny After Dark Web Leak
  • How many courts have had sealed and sensitive files exposed by one vendor's error?
  • Revealed: Afghan data breach after MoD official left laptop open on train
  • Snowflake Loses Two More Bids to Dismiss Data Breach Plaintiffs
  • US company with access to biggest telecom firms uncovers breach by nation-state hackers
  • The 4TB time bomb: when EY's cloud went public (and what it taught us)
Category: Education SectorExposureU.S.

Post navigation

← AU: Linux Australia server hacked, personal information may have been stolen
Change.org springs a leak, exposes private e-mail addresses [updated] →

Now more than ever

"Stand with Ukraine:" above raised hands. The illustration is in blue and yellow, the colors of Ukraine's flag.

Search

Browse by Categories

Recent Posts

  • District of Massachusetts Allows Higher-Ed Student Data Breach Claims to Survive
  • End of the game for cybercrime infrastructure: 1025 servers taken down
  • Doctor Alliance Data Breach: 353GB of Patient Files Allegedly Compromised, Ransom Demanded
  • St. Thomas Brushed Off Red Flags Before Dark-Web Data Dump Rocks Houston
  • A Wiltshire police breach posed possible safety concerns for violent crime victims as well as prison officers
  • Amendment 13 is gamechanger on data security enforcement in Israel
  • Almost two years later, Alpha Omega Winery notifies those affected by a data breach.
  • Court of Appeal reaffirms MFSA liability in data leak case, orders regulator to shoulder costs
  • A jailed hacking kingpin reveals all about the gang that left a trail of destruction
  • Army gynecologist took secret videos of patients during intimate exams, lawsuit says

No, You Can’t Buy a Post or an Interview

This site does not accept sponsored posts or link-back arrangements. Inquiries about either are ignored.

And despite what some trolls may try to claim: DataBreaches has never accepted even one dime to interview or report on anyone. Nor will DataBreaches ever pay anyone for data or to interview them.

Want to Get Our RSS Feed?

Grab it here:

https://databreaches.net/feed/

RSS Recent Posts on PogoWasRight.org

  • Lawmakers Warn Governors About Sharing Drivers’ Data with Federal Government
  • As shoplifting surges, British retailers roll out ‘invasive’ facial recognition tools
  • Data broker Kochava agrees to change business practices to settle lawsuit
  • Amendment 13 is gamechanger on data security enforcement in Israel
  • Changes in the Rules for Disclosure for Substance Use Disorder Treatment Records: 42 CFR Part 2: What Changed, Why It Matters, and How It Aligns with HIPAAs

Have a News Tip?

Email: Tips[at]DataBreaches.net

Signal: +1 516-776-7756

Contact Me

Email: info[at]databreaches.net
Security Issue: security[at]databreaches.net
Mastodon: Infosec.Exchange/@PogoWasRight
Signal: +1 516-776-7756
DMCA Concern: dmca[at]databreaches.net
© 2009 – 2025 DataBreaches.net and DataBreaches LLC. All rights reserved.