The Complete Colorado reports on the debate between Lewis-Palmer School District 38 and concerned parties over a possible breach of student data. The district used Google Apps for Education for student email accounts, made up with a student’s district identification number. Anyone with an email address could download a complete contact list of district students if they had an email account. The contact list could then be used to access Infinite Campus, a program containing the personal data of thousands of students. The Infinite Campus homepage had a message stating passwords would be created with a students’ ID and their birthday, prompting the concerns. The district continues to deny any breaches occurred, despite evidence showing two parents bringing up the issues on separate occasions. At question is whether the possibility for access, without proof of misuse, is a “breach.” The FTC’s recent LabMD decision would indicate possibility of access is enough.
Full Story