Dr.InfoSec helps solve school data breach

Although the school district is not named, this sounds like the Fayetteville breach recently reported…

On July 29th, as I was following up on a story that flashed across my Twitter stream about 30 certified employees of a school district finding themselves victims of ID theft, I found something that should not have been there.

While looking for more information about the school district, I used a targeted Google search; it was a simple one, looking for pages containing the word ‘certified.’

While there were many search results, one in particular caught my eye: an Excel spreadsheet that appeared to contain Personally Identifiable Information (PII) including names, addresses, phone numbers, and social security numbers.

Read more on ISR.

About the author: Dissent