DataBreaches.Net

Menu
  • About
  • Breach Notification Laws
  • Privacy Policy
  • Transparency Report
Menu

Horrific privacy breach by Tewksbury Public Schools

Posted on April 4, 2015 by Dissent

Cross-posted from PogoWasRight.org.

Okay, this is really bad, on multiple levels. Brendan Foley and Jayne Miller report:

Tewksbury Public Schools face angry parental backlash following the release of private student information online last week. A document included in a 222-page School Committee packet remained online for the better part of a week, before being taken down Monday.

Awareness of the data, which details private information for the out of district placements of 83 students and rates their parents according to their “cooperativeness” with the district, raised outrage on social media over the weekend.

[…]

The seven-page memo from Rick Pelletier, Director of Student Services, to the Superintendent was included in the School Committee packet as part of its budget justification package last week. The memo includes a spreadsheet that listed all the students with out of district placements – and also included a ranking on ‘parental cooperativeness.’ The amount of data included could indicate a violation of state and federal law.

The list, which replaces student names with numbers, remains in alphabetical order. Information included the student’s current grade, the out-of-district school, the last school attended, the year the student began attending the new school, information on whether or not the decision was made by the IEP team, a legal settlement (typically kept strictly confidential), or if the student moved in from another town, and miscellaneous detail such as the involvement of the Department of Children and Families, passage of MCAS assessments, and more.

The office of Student Services also published its rating of parents according to their ‘cooperativeness with the district.’ Parents rated a ‘1’ are cooperative, ‘2’ somewhat cooperative, and those rated ‘3’ are ‘not cooperative.’

The Town Crier could easily identify seven families included in the list, and was contacted by others that could identify more families based on the material in the sheet.

Read more on The Town Crier to read responses from the state, the U.S. Education Department, parents, and a special education attorney. It seems like the district is not acknowledging any FERPA breach or breach under state law.

Un-effing-believable.

Related posts:

  • Kept in the Dark — Meet the Hired Guns Who Make Sure School Cyberattacks Stay Hidden
  • Audits of New York schools and the State Education Department reveal ongoing significant concerns
Category: Education SectorExposureU.S.

Post navigation

← AU: Linux Australia server hacked, personal information may have been stolen
Change.org springs a leak, exposes private e-mail addresses [updated] →

Now more than ever

"Stand with Ukraine:" above raised hands. The illustration is in blue and yellow, the colors of Ukraine's flag.

Search

Browse by Categories

Recent Posts

  • Hunters International to provide free decryptors for all victims as they shut down (1)
  • SEC and SolarWinds Seek Settlement in Securities Fraud Case
  • Cyberattacks Disrupt Iran’s Bread Distribution, Payments Remain Frozen
  • Hacker with ‘political agenda’ stole data from Columbia, university says
  • Keymous+ Hacker Group Claims Responsibility for Over 700 Global DDoS Attacks
  • Data breach reveals Catwatchful ‘stalkerware’ is spying on thousands of phones
  • DOJ investigates ex-ransomware negotiator over extortion kickbacks
  • Hackers Using PDFs to Impersonate Microsoft, DocuSign, and More in Callback Phishing Campaigns
  • One in Five Law Firms Hit by Cyberattacks Over Past 12 Months
  • U.S. Sanctions Russian Bulletproof Hosting Provider for Supporting Cybercriminals Behind Ransomware

No, You Can’t Buy a Post or an Interview

This site does not accept sponsored posts or link-back arrangements. Inquiries about either are ignored.

And despite what some trolls may try to claim: DataBreaches has never accepted even one dime to interview or report on anyone. Nor will DataBreaches ever pay anyone for data or to interview them.

Want to Get Our RSS Feed?

Grab it here:

https://databreaches.net/feed/

RSS Recent Posts on PogoWasRight.org

  • Record-Breaking $1.55M CCPA Settlement Against Health Information Website Publisher
  • Ninth Circuit Reviews Website Tracking Class Actions and the Reach of California’s Privacy Law
  • US healthcare offshoring: Navigating patient data privacy laws and regulations
  • Data breach reveals Catwatchful ‘stalkerware’ is spying on thousands of phones
  • Google Trackers: What You Can Actually Escape And What You Can’t
  • Oregon Amends Its Comprehensive Privacy Statute
  • Wisconsin Supreme Court’s Liberal Majority Strikes Down 176-Year-Old Abortion Ban

Have a News Tip?

Email: Tips[at]DataBreaches.net

Signal: +1 516-776-7756

Contact Me

Email: info[at]databreaches.net

Mastodon: Infosec.Exchange/@PogoWasRight

Signal: +1 516-776-7756

DMCA Concern: dmca[at]databreaches.net
© 2009 – 2025 DataBreaches.net and DataBreaches LLC. All rights reserved.