Latest DC Snafu Exposes Student Data on Dropbox

About 12,000 students who possess individualized education programs (IEPs) had personal information posted to a public Dropbox site attending schools in Washington, D.C. Reporting by the Washington Post said the data was inadvertently made available online "for several hours" on Tuesday and has since been taken down. The file with the private information was uploaded to the cloud-based file storage site prior to a meeting about the program that manages the IEPs. The file included names, schools, identification numbers and other personal details about each student, including his or her disability and what special services they use.

The announcement came from the district's Office of the State Superintendent of Education, which handles federal grants, compliance with federal laws and other governance activities for area students. According to the Post, Hanseul Kang, the state superintendent of education, issued a "letter to colleagues" in which she stated, "Our families deserve to know that their students' personal information is being kept confidential and secure in the education system."

Just about a year ago the District of Columbia Public Schools suffered a different kind of exposure of special education student information. The district realized that an internal Web site launched in 2010 that stored training materials for district staff included login information that would enable anybody to access a database containing information about special ed students. The district found no evidence that anybody has actually viewed the data. At that time, the district issued a statement apologizing for the breach: "We understand how important it is to safeguard student information and will conduct a top-to-bottom review of our security practices to ensure this does not happen again."

Then in March 2015, the Office of the State Superintendent of Education reported that it had "inadvertently" released student data in response to a Freedom of Information Act request. The disclosed data included student names, birth dates, grade levels, gender, race, ethnicity, English language learner classification, non-public attendance, special ed status, school of attendance, details related to suspensions and expulsions and student identifiers. In that situation the data was actually redacted and the file locked when it was sent to the FOIA recipient; however, the office later found out that the file could be unlocked, exposing the personal information.

In none of these cases were Social Security numbers involved.

About the Author

Dian Schaffhauser is a former senior contributing editor for 1105 Media's education publications THE Journal, Campus Technology and Spaces4Learning.

Featured

  • horizontal stack of U.S. dollar bills breaking in half

    ED Abruptly Cancels ESSER Funding Extensions

    The Department of Education has moved to close the door on COVID relief funding for schools, declaring that "extending deadlines for COVID-related grants, which are in fact taxpayer funds, years after the COVID pandemic ended is not consistent with the Department’s priorities and thus not a worthwhile exercise of its discretion."

  • computer screen displaying a landline phone being unplugged from a single cord, with a modern office desk, keyboard, and subtle lighting in the background

    Microsoft Shutting Down Skype

    Microsoft has announced that it will discontinue service for its Skype telecommunications and video calling services on May 5, 2025.

  • reDesign Future9 report

    ReDesign Updates 9 Essential Competencies for K-12 Students

    ReDesign, a provider of support and resources for competency-based education, has updated its Future9 Competency Framework to reflect the essential skills K-12 students need today to thrive in their education and workforce journeys.

  • abstract illustration of a classroom with glowing circuits and technology gradually integrated from left to right

    Not All Tech Is Created Equal: Transforming Classrooms with Purposeful Technology

    Classrooms will always be places where students build relationships, develop critical thinking skills, and grow into who they’re going to be as adults and citizens. Technology should be a tool to support these goals.