EE: Personal and sensitive information of children publicly available for years

As I was just saying in the post about the Girl Scouts breach, children’s medical information can be breached in so many ways outside of the healthcare sector. And that’s true outside the U.S. as well. Priit Pärnapuu provides a concerning, but timely, example from Estonia:

Schools’ information system EKIS allowed anyone to read and download descriptions of children’s medical condition, behavioral problems and family relationships for years. The Ministry of Education and Research blames careless employees of educational institutions some of whom admit mistakes while others say making such mistakes is impossible.

[…]

The Estonian Schools Information System (EKIS) holds roughly 4-5 million entries entered since 2009. The system combines the document registers of more than 500 schools and kindergartens. This means that the total number of documents and identities of people improperly made public stretches into thousands at least. Sensitive information leaked from the document registers of around 50 institutions.