BreachExchange mailing list archives

Las Cruces Schools Data Exposed on Web


From: rchick <rchicker () etiolated org>
Date: Thu, 8 May 2008 22:07:49 -0400

http://www.redorbit.com/news/technology/1376607/las_cruces_schools_data_exposed_on_web/

 LAS CRUCES -- A part-time computer analyst for Las Cruces Public
Schools inadvertently posted personal data for 50 special education
students and 1,750 district employees on the Internet, district
officials said Wednesday.

LCPS Superintendent Stan Rounds declined to specify what kind of
information was moved from a secure, encrypted database to the
Internet, or to identify the Web site it was unintentionally moved to.
But he said the information could be used in identity theft.

"Our school district goes to great lengths to maintain the
confidentiality of student and staff records," Rounds said during a
news conference. "This appears to be an isolated incident that was
caused by human error.

"Nonetheless, I am very concerned there was a breach of
confidentiality," he said.

The personal data was posted to an unsecured Web site on April 29. The
error was discovered Monday, and Rounds immediately ordered the data
removed from two Internet sites where it was found.

[...]
_______________________________________________
Dataloss Mailing List (dataloss () attrition org)
http://attrition.org/dataloss

Tenable Network Security offers data leakage and compliance monitoring
solutions for large and small networks. Scan your network and monitor your
traffic to find the data needing protection before it leaks out!
http://www.tenablesecurity.com/products/compliance.shtml


Current thread: