Monday, 1st December, 2008
Exact Match
Confidential School Records Made Available Online
19/Aug/2008
IT security and control firm Sophos is today reminding organisations of the importance of data protection following media reports that more than 100,000 student records were accidentally made available online. The security blunder by The Princeton Review, an educational support services provider, is believed to have happened as a result of the company changing internet providers earlier this year, exposing the confidential data for seven weeks.
The Princeton Review’s publicly accessible and searchable website exposed the dates of birth and names of 74,000 students in Virginia. In addition, another file revealed the dates of birth, test scores and ethnicity of 34,000 students in Florida, after the county hired The Princeton Review to measure academic progress.
“We should all be grateful that The Princeton Review has taken action over this data breach, but it should never have happened in the first place,” said Graham Cluley, senior technology consultant for Sophos. “The information should have been held securely, and identifying data such as names and full dates of birth should have been wiped from the files.”
The data breach was discovered and exposed by a competitor of The Princeton Review as it conducted competitive intelligence.
“If you need any encouragement to make sure that your house is in order and your data secure, and the threat of identity thieves isn’t enough for you, then maybe the thought that a business rival might take your blunder to the press will do it,” continued Cluley.
News Search
Keyword:
Risk Area:
All Areas
Enterprise-Wide Risk
Credit Risk
Operational Risk
Market Risk
Trading
Compliance
Technology
Risk Analysis
Contract Wins
Click
here
to view more news
Archive
November 2008
October 2008
September 2008
August 2008
July 2008
June 2008
more...
Risk Home
|
Risk Vendor Directory
|
Risk Consultancy Directory
|
Risk Associations Directory
|
Risk Services Directory
|
Risk Jobs
|
Risk Events
|
Who’s Who in Risk
|
Risk Blog
|
Risk Industry Resources
|
Contact Us
|
Site Map