@douglevin @funnymonkey @brett
OK, so the bad news is that it looks like it's true. I got access to the data tranche and there is a LOT of student PII in there in terms of PDF files/letters and psych evals, and I spotted a .csv file with disabilities records on 2k students from 2017 with their IEP disability classification, name, services to be given, etc. I haven't yet started googling names, so I'm saying the data looks real but I haven't actually tried to confirm that yet.
A lot of the documents such as attendance and truancy letters for named students were OLD -- like back to 2003, etc.
I have a feeling that these records -- assuming, for now, that they are real -- do not necessarily trigger notification requirements under the D.C. notification law, but I have emailed DC to ask for clarification on the application of their law to student records.
I have not really spotted employee personnel data of note, but have only skimmed the tranche with a focus on student into.
If you HMU on Signal, I can give you the entire filelist for the tranche.
#EduSec #databreach #cybersecurity #legacydata #FERPA