Latest DC Snafu Exposes Student Data on Dropbox

About 12,000 students who possess individualized education programs (IEPs) had personal information posted to a public Dropbox site attending schools in Washington, D.C. Reporting by the Washington Post said the data was inadvertently made available online "for several hours" on Tuesday and has since been taken down. The file with the private information was uploaded to the cloud-based file storage site prior to a meeting about the program that manages the IEPs. The file included names, schools, identification numbers and other personal details about each student, including his or her disability and what special services they use.

The announcement came from the district's Office of the State Superintendent of Education, which handles federal grants, compliance with federal laws and other governance activities for area students. According to the Post, Hanseul Kang, the state superintendent of education, issued a "letter to colleagues" in which she stated, "Our families deserve to know that their students' personal information is being kept confidential and secure in the education system."

Just about a year ago the District of Columbia Public Schools suffered a different kind of exposure of special education student information. The district realized that an internal Web site launched in 2010 that stored training materials for district staff included login information that would enable anybody to access a database containing information about special ed students. The district found no evidence that anybody has actually viewed the data. At that time, the district issued a statement apologizing for the breach: "We understand how important it is to safeguard student information and will conduct a top-to-bottom review of our security practices to ensure this does not happen again."

Then in March 2015, the Office of the State Superintendent of Education reported that it had "inadvertently" released student data in response to a Freedom of Information Act request. The disclosed data included student names, birth dates, grade levels, gender, race, ethnicity, English language learner classification, non-public attendance, special ed status, school of attendance, details related to suspensions and expulsions and student identifiers. In that situation the data was actually redacted and the file locked when it was sent to the FOIA recipient; however, the office later found out that the file could be unlocked, exposing the personal information.

In none of these cases were Social Security numbers involved.

About the Author

Dian Schaffhauser is a former senior contributing editor for 1105 Media's education publications THE Journal, Campus Technology and Spaces4Learning.

Featured

  • pattern of icons for math and reading, including a pi symbol, calculator, and open book

    HMH Launches Personalized Path Solution

    Adaptive learning company HMH has introduced HMH Personalized Path, a K-8 ELA and math product that combines intervention curriculum, adaptive practice, and assessment for students of all achievement levels.

  • red brick school building with a large yellow "AI" sign above its main entrance

    New National Academy for AI Instruction to Provide Free AI Training for Educators

    In an effort to "transform how artificial intelligence is taught and integrated into classrooms across the United States," the American Federation of Teachers (AFT), in partnership with Microsoft, OpenAI, Anthropic, and the United Federation of Teachers, is launching the National Academy for AI Instruction, a $23 million initiative that will provide access to free AI training and curriculum for all AFT members, beginning with K-12 educators.

  • laptop on a desk with its screen displaying numerous colorful educational app icons

    Survey Finds Majority of Schools Using 10 to 15 Educational Apps

    A new report points to the fragmented digital landscape of educational apps in use at schools and districts across the country.

  • laptop displaying AI-powered educational content

    Kira Introduces AI-Generated Lesson Tool

    AI company Kira has announced a new AI-powered lesson generation tool that it says delivers complete, standards-aligned lessons that are personalized to each student.